AWS Step Functions (IAM)

AWSstatescompute

AWS Step Functions is a serverless orchestration service that lets you coordinate multiple AWS services into flexible workflows.

iamaws

docs ↗

Permissions

Actions in this service

states:ListStateMachines

states:DescribeStateMachine

states:StartExecution

states:StopExecution

states:DescribeExecution

states:GetExecutionHistory

states:ListExecutions

states:ListTagsForResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "states:ListStateMachines", "states:DescribeStateMachine", "states:StartExecution", "states:StopExecution", "states:DescribeExecution", "states:GetExecutionHistory", "states:ListExecutions", "states:ListTagsForResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid states:* — grants full control including delete and modify of state machines and executions

Avoid states:DeleteStateMachine unless explicitly needed for cleanup

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/states/states.json ↗