I always come back to this list and look for the right service principal, although it's great to have it listed in this gist, I realized it can get outdated pretty quickly with all the new AWS services being released.

So I'd figure I'd take it a step further and create an automatically updated reference list that scrapes both the AWS documentation and the AWS Policy Generator to keep everything current. It's currently got 452+ service principals with direct links to the docs where available, and it updates programmatically so it never gets stale.

You can check it out here: AWS IAM Service Principals - Complete Reference List

And if you're like me and prefer staying inside VS Code without breaking your flow, I also created an extension that provides autocompletion of all AWS service principals. It works with CloudFormation, Terraform, and AWS CDK (TypeScript & Python):

• VS Code Marketplace
• Open VSX (for VSCodium)

I think that the value for malware protection has changed from malware-protection.guardduty.amazonaws.com to malware-protection-plan.guardduty.amazonaws.com. See here towards the bottom of the page: https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection-s3-iam-policy-prerequisite.html

I keep coming back to this list again and again and each time I am more frustrated that this is not documented by AWS properly.
Instead we need to scrape the internet for references to these items scatted throughout documentation in sample policies.

e.g. up until this week I had no idea (and it is not on this list) that there is a "fargate.amazonaws.com" service principal as seen here: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/fargate-create-storage-key.html

bedrock-agentcore.amazonaws.com