Amazon Textract (IAM)

aws ml

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from scanned documents.

Common permissions

textract:StartDocumentTextDetectiontextract:GetDocumentTextDetectiontextract:StartDocumentAnalysistextract:GetDocumentAnalysistextract:StartExpenseAnalysistextract:GetExpenseAnalysistextract:ListAdapterstextract:GetAdapter

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "textract:StartDocumentTextDetection",
        "textract:GetDocumentTextDetection",
        "textract:StartDocumentAnalysis",
        "textract:GetDocumentAnalysis",
        "textract:StartExpenseAnalysis",
        "textract:GetExpenseAnalysis",
        "textract:ListAdapters",
        "textract:GetAdapter"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid textract:* — grants full control including delete and modify of adapters and adapter versions
Avoid textract:DeleteAdapter and textract:DeleteAdapterVersion unless explicitly needed for cleanup

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/textract/textract.json ↗

API

full doc /v1/iam/textract