{ "Version": "2012-10-17", "Statement": { "Sid": "AllowList", "Effect": "Deny", "Resource": "*", "NotAction": ["access-analyzer:*", "account:*", "acm:*", "acm-pca:*", "apigateway:*", "application-autoscaling:*", "appstream:*", "athena:*", "autoscaling:*", "autoscaling-plans:*", "aws-portal:*", "backup:*", "backup-storage:*", "batch:*", "chime:*", "clouddirectory:*", "cloudformation:*", "cloudfront:*", "cloudtrail:*", "cloudwatch:*", "codebuild:*", "codecommit:*", "codedeploy:*", "codepipeline:*", "cognito-identity:*", "cognito-idp:*", "cognito-sync:*", "comprehend:*", "comprehendmedical:*", "config:*", "connect:*", "controltower:*", "datasync:*", "directconnect:*", "dms:*", "ds:*", "dynamodb:*", "ebs:*", "ec2:*", "ec2messages:*", "ecr:*", "ecs:*", "eks:*", "elasticache:*", "elasticbeanstalk:*", "elasticfilesystem:*", "elasticloadbalancing:*", "elasticmapreduce:*", "events:*", "execute-api:*", "firehose:*", "glacier:*", "glue:*", "groundstation:*", "guardduty:*", "health:*", "iam:*", "importexport:*", "inspector:*", "iot:*", "iot-device-tester:*", "iotdeviceadvisor:*", "iotwireless:*", "kinesis:*", "kms:*", "lakeformation:*", "lambda:*", "license-manager:*", "logs:*", "mediaconvert:*", "mobiletargeting:*", "opsworks:*", "organizations:*", "polly:*", "quicksight:*", "rds:*", "rds-data:*", "rds-db:*", "redshift:*", "rekognition:*", "resource-groups:*", "route53:*", "route53domains:*", "route53resolver:*", "s3:*", "sagemaker:*", "secretsmanager:*", "securityhub:*", "serverlessrepo:*", "servicecatalog:*", "ses:*", "shield:*", "sms:*", "sms-voice:*", "snowball:*", "sns:*", "sqs:*", "ssm:*", "ssmmessages:*", "states:*", "storagegateway:*", "sts:*", "support:*", "swf:*", "tag:*", "textract:*", "transcribe:*", "translate:*", "trustedadvisor:*", "waf:*", "waf-regional:*", "wafv2:*", "workdocs:*", "workspaces:*"] } }