All Tools View Categories About Contact Privacy

IAM Action Glossary

A searchable reference of common AWS IAM actions and what they do.

Curated selection of ~70 common actions across ~12 services — not AWS’s full action catalog of thousands of actions. Runs entirely in your browser.
ServiceActionDescription

About IAM Action Glossary

IAM policies grant access using action strings like s3:GetObject or dynamodb:PutItem, but it is not always obvious from the name alone exactly what an action does. IAM Action Glossary is a searchable reference of common AWS IAM actions, each with the service it belongs to and a short, plain-English description of what it actually does.

This is deliberately a curated subset, not an attempt at AWS’s full action catalog. AWS documents thousands of individual actions across 300+ services, each with precise semantics (some actions, for example, only affect metadata, while similarly-named ones affect data). This glossary covers roughly 70 representative, commonly used actions across about a dozen widely used services — enough to be useful for reading and writing everyday policies, without pretending to be exhaustive or authoritative.

For the complete, authoritative list of actions (and their associated resource types and condition keys) for any AWS service, see that service’s page in AWS’s official Service Authorization Reference.

Features

  • ~70 curated actions across ~12 commonly used AWS services.
  • Live search/filter by action name, service, or description text.
  • Plain-English one-line descriptions for every entry.
  • Explicitly labeled as a curated subset, not the full IAM action catalog.
  • 100% client-side — nothing is sent anywhere.

How to Use

  1. Type a keyword into the search box — an action name, service prefix, or a word from a description (e.g. "encrypt", "s3", "temporary").
  2. Scan the filtered table for matching actions and their descriptions.
  3. Clear the search box to see the full curated list again.

Examples

Example 1. Search "encrypt" — surfaces kms:Encrypt, kms:Decrypt, and kms:GenerateDataKey.

Example 2. Search "dynamodb" — surfaces the curated DynamoDB actions (GetItem, PutItem, Query, Scan, etc.) with their descriptions.

Example 3 — description-text search. Search "temporary" — surfaces sts:AssumeRole and related STS actions even though "temporary" doesn’t appear in the action name.

Benefits

  • Faster than reading full AWS docs for common, everyday actions.
  • Search by meaning, not just by exact action name.
  • Honest scope — clearly a curated subset with a pointer to AWS’s authoritative reference.
  • Private — runs entirely in your browser.

Frequently Asked Questions

Is this every IAM action?
No. AWS documents thousands of individual IAM actions across 300+ services, and this glossary covers a curated selection of roughly 70 representative actions across about 12 commonly used services (S3, EC2, IAM, Lambda, DynamoDB, KMS, SNS, SQS, RDS, ECS, CloudFormation, Secrets Manager, STS). For the complete, authoritative action list per service, see AWS’s own Service Authorization Reference.
How does the search box work?
It filters the table live, case-insensitively, matching against the action name, the service prefix, and the description text — so searching "temporary" surfaces STS actions even though the word "temporary" isn’t in the action name itself.
Are the descriptions official AWS wording?
No — each description is a short, plain-English summary written for this glossary, not copied verbatim from AWS documentation. They aim to be accurate but are not a substitute for the official action reference when precision matters (e.g. for a compliance review).
What if I search for an action that is not in the table?
No results are shown — the tool never fabricates a plausible-sounding but made-up entry. Check AWS’s Service Authorization Reference for actions outside this curated subset.
Is anything sent to AWS or a server?
No — this is a static reference table filtered entirely in your browser.