IAM / ml / textract

Amazon Textract (IAM)

JSON →
AWStextractml

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from scanned documents.

iamaws
docs ↗
Permissions
Actions in this service
textract:StartDocumentTextDetection
textract:GetDocumentTextDetection
textract:StartDocumentAnalysis
textract:GetDocumentAnalysis
textract:StartExpenseAnalysis
textract:GetExpenseAnalysis
textract:ListAdapters
textract:GetAdapter
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "textract:StartDocumentTextDetection", "textract:GetDocumentTextDetection", "textract:StartDocumentAnalysis", "textract:GetDocumentAnalysis", "textract:StartExpenseAnalysis", "textract:GetExpenseAnalysis", "textract:ListAdapters", "textract:GetAdapter" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid textract:* — grants full control including delete and modify of adapters and adapter versions
Avoid textract:DeleteAdapter and textract:DeleteAdapterVersion unless explicitly needed for cleanup
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/textract/textract.json ↗