Critical-risk tools in AWS
34 of the 300 tools in AWS are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bulk_delete_by_criteriaDestructivebulk_delete_by_criteria
-
cache_deleteDestructiveDelete a value from the cache. Args: key: The key to delete Returns: Success message or error message
-
cache_delete_manyDestructiveDelete multiple values from the cache. Args: keys: List of keys to delete Returns: Success message or error message
-
cache_delete_multiDestructiveDelete multiple values from the cache (alias for delete_many). Args: keys: List of keys to delete Returns: Success message or error message
-
cache_flush_allDestructiveFlush all cache entries. Args: delay: Optional delay in seconds before flushing Returns: Success message or error message
-
deleteDestructiveDelete a Valkey key. Args: key (str): The key to delete. Returns: str: Confirmation message or an error message.
-
delete_access_keyDestructivedelete_access_key
-
delete_datastoreDestructiveDelete a data store from AWS HealthImaging.
-
delete_groupDestructivedelete_group
-
delete_image_setDestructivedelete_image_set
-
delete_instance_in_seriesDestructivedelete_instance_in_series
-
delete_instance_in_studyDestructivedelete_instance_in_study
-
delete_patient_studiesDestructivedelete_patient_studies
-
delete_resourceDestructivedelete_resource
-
delete_role_policyDestructivedelete_role_policy
-
delete_series_by_uidDestructivedelete_series_by_uid
-
delete_studyDestructivedelete_study
-
delete_userDestructivedelete_user
-
delete_user_policyDestructivedelete_user_policy
-
detach_user_policyDestructivedetach_user_policy
-
json_arrtrimDestructiveTrim array at path to include only elements within range. Args: key: The name of the key path: The path in the JSON document start: Start index (inc...
-
json_clearDestructiveClear container at path (array or object). Args: key: The name of the key path: The path in the JSON document Returns: Success message or error...
-
json_delDestructiveDelete value at path. Args: key: The name of the key path: The path in the JSON document Returns: Success message or error message
-
list_pop_leftDestructivePop value(s) from left of list. Args: key: The name of the key count: Number of values to pop (optional) Returns: Value(s) or error message
-
list_trimDestructiveTrim list to specified range. Args: key: The name of the key start: Start index (inclusive) stop: Stop index (inclusive) Returns: Succe...
-
remove_instance_from_image_setDestructiveremove_instance_from_image_set
-
remove_series_from_image_setDestructiveremove_series_from_image_set
-
set_popDestructiveRemove and return random member(s) from set. Args: key: The name of the key count: Number of members to pop (optional) Returns: Popped member(s...
-
sorted_set_remove_by_lexDestructiveRemove members by lexicographical range. Args: key: The name of the key min_lex: Minimum value (inclusive) max_lex: Maximum value (inclusive) R...
-
sorted_set_remove_by_scoreDestructiveRemove members by score range. Args: key: The name of the key min_score: Minimum score (inclusive) max_score: Maximum score (inclusive) Returns...
-
stream_deleteDestructiveDelete entries from stream. Args: key: The name of the key id: Entry ID to delete Returns: Success message or error message
-
stream_group_delete_consumerDestructiveDelete consumer from group. Args: key: The name of the key group_name: Name of consumer group consumer_name: Name of consumer to delete Returns...
-
stream_group_destroyDestructiveDestroy consumer group. Args: key: The name of the key group_name: Name of consumer group Returns: Success message or error message
-
stream_trimDestructiveTrim stream to specified length. Args: key: The name of the key maxlen: Maximum length to trim to approximate: Whether maxlen is approximate Re...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.