cloudtrail.yml

Actions:
  - Name: cloudtrail:AddTags
  - Name: cloudtrail:CancelQuery
  - Name: cloudtrail:CreateChannel
  - Name: cloudtrail:CreateEventDataStore
  - Name: cloudtrail:CreateTrail
  - Name: cloudtrail:DeleteChannel
  - Name: cloudtrail:DeleteEventDataStore
  - Name: cloudtrail:DeleteResourcePolicy
  - Name: cloudtrail:DeleteTrail
  - Name: cloudtrail:DeregisterOrganizationDelegatedAdmin
  - Name: cloudtrail:DescribeQuery
  - Name: cloudtrail:DescribeTrails
  - Name: cloudtrail:DisableFederation
  - Name: cloudtrail:EnableFederation
  - Name: cloudtrail:GetChannel
  - Name: cloudtrail:GetEventDataStore
  - Name: cloudtrail:GetEventSelectors
  - Name: cloudtrail:GetImport
  - Name: cloudtrail:GetInsightSelectors
  - Name: cloudtrail:GetQueryResults
  - Name: cloudtrail:GetResourcePolicy
  - Name: cloudtrail:GetTrail
  - Name: cloudtrail:GetTrailStatus
  - Name: cloudtrail:ListChannels
  - Name: cloudtrail:ListEventDataStores
  - Name: cloudtrail:ListImportFailures
  - Name: cloudtrail:ListImports
  - Name: cloudtrail:ListPublicKeys
  - Name: cloudtrail:ListQueries
  - Name: cloudtrail:ListTags
  - Name: cloudtrail:ListTrails
  - Name: cloudtrail:LookupEvents
  - Name: cloudtrail:PutEventSelectors
  - Name: cloudtrail:PutInsightSelectors
  - Name: cloudtrail:PutResourcePolicy
  - Name: cloudtrail:RegisterOrganizationDelegatedAdmin
  - Name: cloudtrail:RemoveTags
  - Name: cloudtrail:RestoreEventDataStore
  - Name: cloudtrail:StartEventDataStoreIngestion
  - Name: cloudtrail:StartImport
  - Name: cloudtrail:StartLogging
  - Name: cloudtrail:StartQuery
  - Name: cloudtrail:StopEventDataStoreIngestion
  - Name: cloudtrail:StopImport
  - Name: cloudtrail:StopLogging
  - Name: cloudtrail:UpdateChannel
  - Name: cloudtrail:UpdateEventDataStore
  - Name: cloudtrail:UpdateTrail

  # actions with no corresponding API
  - Name: cloudtrail:CreateDashboard
  - Name: cloudtrail:CreateServiceLinkedChannel
  - Name: cloudtrail:DeleteDashboard
  - Name: cloudtrail:DeleteServiceLinkedChannel
  - Name: cloudtrail:GenerateQuery
  - Name: cloudtrail:GenerateQueryResultsSummary
  - Name: cloudtrail:GetDashboard
  - Name: cloudtrail:GetEventDataStoreData
  - Name: cloudtrail:GetServiceLinkedChannel
  - Name: cloudtrail:ListDashboards
  - Name: cloudtrail:ListServiceLinkedChannels
  - Name: cloudtrail:StartDashboardRefresh
  - Name: cloudtrail:UpdateDashboard
  - Name: cloudtrail:UpdateServiceLinkedChannel

  # APIs without an IAM action
  - Name: cloudtrail:ListInsightsMetricData