IAM / analytics / appflow

AWS AppFlow (IAM)

JSON →
AWSappflowanalytics

AWS AppFlow is a fully managed integration service that enables you to securely transfer data between SaaS applications and AWS services.

iamaws
docs ↗
Permissions
Actions in this service
appflow:ListFlows
appflow:DescribeFlow
appflow:StartFlow
appflow:StopFlow
appflow:RunFlow
appflow:CreateFlow
appflow:UpdateFlow
appflow:ListConnectors
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "appflow:ListFlows", "appflow:DescribeFlow", "appflow:StartFlow", "appflow:StopFlow", "appflow:RunFlow", "appflow:CreateFlow", "appflow:UpdateFlow", "appflow:ListConnectors" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid appflow:* — grants full control including delete and modify operations.
Avoid appflow:DeleteFlow — can permanently delete data flows.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/appflow/appflow.json ↗