The Action element describes the specific action or actions that will be allowed or denied.
Statements must include either an Action or NotAction element. Each AWS service has its own
set of actions that describe tasks that you can perform with that service.
You specify a value using a service namespace as an action prefix (iam, ec2, sqs,
sns, s3, etc.) followed by the name of the action to allow or deny. The name must match
an action that is supported by the service. The prefix and the action name are case
insensitive. For example, iam:ListAccessKeys is the same as IAM:listaccesskeys.