aws-iam-language-server 0.0.7 → 0.0.9

package/src/data/servicereference/services/securityagent.json

@@ -1 +1 @@
-{"name":"securityagent","actions":{"AddArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add an Artifact for the given Agent Instance","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"AddControl":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to add a customer managed Control","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"BatchDeletePentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple penetration tests in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetAgentInstances":{"conditionKeys":[],"resources":[{"name":"AgentInstance"}],"description":"Grants permission to retrieve multiple agent instances in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentInstance","required":true}]},"BatchGetAgentSpaces":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple agent spaces in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetArtifactMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve one or more Artifact Metadata records for the given Agent Instance","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing findings in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetPentestJobContentMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetPentestJobTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetPentestJobs":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetPentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple penetration tests in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetSecurityTestContentMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"BatchGetTargetDomains":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to retrieve multiple target domains in a single request","accessLevel":"Read","resourceTypes":[{"name":"TargetDomain","required":true}]},"BatchGetTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreateAgentInstance":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to create an agent instance record","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"CreateAgentSpace":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an agent space record","accessLevel":"Write","resourceTypes":[]},"CreateApplication":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new application","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole","sso:CreateApplication"]},"CreateDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreateDocumentReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a document review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreateIntegration":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to create a security testing integration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"CreateMembership":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add a single member to a agent instance with specified role","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreateOneTimeLoginSession":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a one time login session","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreatePentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new penetration test configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"CreateSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to add a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"CreateTargetDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a target domain record","accessLevel":"Write","resourceTypes":[]},"DeleteAgentInstance":{"conditionKeys":[],"resources":[{"name":"AgentInstance"}],"description":"Grants permission to delete an agent instance record","accessLevel":"Write","resourceTypes":[{"name":"AgentInstance","required":true}]},"DeleteAgentSpace":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"DeleteArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an Artifact","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"DeleteControl":{"conditionKeys":[],"resources":[{"name":"Control"}],"description":"Grants permission to delete a customer managed Control","accessLevel":"Write","resourceTypes":[{"name":"Control","required":true}]},"DeleteDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"DeleteDocumentReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete a document review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"DeleteIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to delete the integration of an application","accessLevel":"Write","resourceTypes":[{"name":"Integration","required":true}]},"DeleteMembership":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to remove a single member associated to an agent instance","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"DeleteSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirement"}],"description":"Grants permission to delete a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirement","required":true}]},"DeleteTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to delete a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}]},"DescribeFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve security findings for a penetration test or security testing tasks in a penetration test","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get application details by application ID","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}]},"GetArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve an Artifact for the given Agent Instance","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetCodeReviewTask":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve a Code Review Task","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetControl":{"conditionKeys":[],"resources":[{"name":"Control"}],"description":"Grants permission to retrieve a Control","accessLevel":"Read","resourceTypes":[{"name":"Control","required":true}]},"GetDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get the status of the associated agent space design review","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetDesignReviewArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get design review artifact for a specific document","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetDesignReviewFeedback":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get feedback for a design review comment","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetDocReviewTask":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve a document review task","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetDocumentReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get the status of the associated agent instance document review","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetDocumentReviewArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get document review artifact for a specific document","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}]},"GetIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to get the integration metadata by ID","accessLevel":"Read","resourceTypes":[{"name":"Integration","required":true}]},"GetLoginSessionCredentials":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve credentials for a one time login session","accessLevel":"Read","resourceTypes":[]},"GetSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirement"}],"description":"Grants permission to retrieve a Security Requirement","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirement","required":true}]},"HandleOneTimeLoginSession":{"conditionKeys":[],"resources":[],"description":"Grants permission to process and invalidate a one time login session","accessLevel":"Write","resourceTypes":[]},"InitiateProviderRegistration":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}]},"ListAgentInstanceTasks":{"conditionKeys":[],"resources":[{"name":"AgentInstance"}],"description":"Grants permission to list tasks for a specific agent instance","accessLevel":"List","resourceTypes":[{"name":"AgentInstance","required":true}]},"ListAgentInstances":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent instances","accessLevel":"List","resourceTypes":[]},"ListAgentSpaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent spaces","accessLevel":"List","resourceTypes":[]},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all applications in the account","accessLevel":"List","resourceTypes":[]},"ListArtifacts":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all artifacts for the given project","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all Controls","accessLevel":"List","resourceTypes":[]},"ListDesignReviewComments":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list design review comments","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListDesignReviews":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all design reviews for the given project","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListDiscoveredEndpoints":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListDocumentReviewComments":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list document review comments","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListDocumentReviews":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all document reviews for the given project","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list findings with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListIntegratedResources":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list integrated resources for an agent instance","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListIntegrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the integrations owned by the caller's AWS account","accessLevel":"List","resourceTypes":[]},"ListMemberships":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all members associated to an agent instance with pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListPentestJobTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list pentest job tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListPentestJobsForPentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration test jobs associated with a penetration test","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListPentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration tests with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"ListResourcesFromIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to list resources from Integration","accessLevel":"List","resourceTypes":[{"name":"Integration","required":true}]},"ListSecurityRequirements":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all Security Requirements","accessLevel":"List","resourceTypes":[]},"ListTargetDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list target domains","accessLevel":"List","resourceTypes":[]},"ListTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list security testing tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}]},"PutDesignReviewFeedback":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to submit feedback for a design review comment","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"StartCodeRemediation":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to start code remediation for the findings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"StartPentestExecution":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"StartPentestJob":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"StopPentestExecution":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"StopPentestJob":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"ToggleManagedControl":{"conditionKeys":[],"resources":[{"name":"Control"}],"description":"Grants permission to toggle the status","accessLevel":"Write","resourceTypes":[{"name":"Control","required":true}]},"ToggleManagedSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirement"}],"description":"Grants permission to toggle the status of a managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirement","required":true}]},"UpdateAgentInstance":{"conditionKeys":[],"resources":[{"name":"AgentInstance"}],"description":"Grants permission to update an agent instance record","accessLevel":"Write","resourceTypes":[{"name":"AgentInstance","required":true}]},"UpdateAgentSpace":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update application configuration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:PassRole"]},"UpdateControl":{"conditionKeys":[],"resources":[{"name":"Control"}],"description":"Grants permission to update a customer managed Control","accessLevel":"Write","resourceTypes":[{"name":"Control","required":true}]},"UpdateFinding":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing security finding with new details or status","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"UpdateIntegratedResources":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update integrated resources for an agent instance","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"UpdatePentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing penetration test with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}]},"UpdateSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirement"}],"description":"Grants permission to update a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirement","required":true}]},"UpdateTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to update a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}]},"VerifyTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to verify ownership for a registered target domain","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}]}},"resources":[{"name":"AgentInstance","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-instance/${AgentId}"],"conditionKeys":[]},{"name":"AgentSpace","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"],"conditionKeys":[]},{"name":"Application","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":[]},{"name":"Artifact","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/artifact/${ArtifactId}"],"conditionKeys":[]},{"name":"Control","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:control/${ControlId}"],"conditionKeys":[]},{"name":"Finding","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/finding/${FindingId}"],"conditionKeys":[]},{"name":"Integration","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}"],"conditionKeys":[]},{"name":"Pentest","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest/${PentestId}"],"conditionKeys":[]},{"name":"PentestJob","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest-job/${JobId}"],"conditionKeys":[]},{"name":"PentestTask","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest-task/${TaskId}"],"conditionKeys":[]},{"name":"SecurityRequirement","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:security-requirement/${SecurityRequirementId}"],"conditionKeys":[]},{"name":"TargetDomain","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"],"conditionKeys":[]}],"conditionKeys":{}}
+{"name":"securityagent","actions":{"AddArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add an Artifact for the given Agent Space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_AddArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-AddArtifact"},"BatchDeletePentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete multiple penetration tests in a single request","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchDeletePentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchDeletePentests"},"BatchGetAgentSpaces":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple agent spaces in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetAgentSpaces"},"BatchGetArtifactMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetArtifactMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetArtifactMetadata"},"BatchGetFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing findings in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetFindings"},"BatchGetPentestJobContentMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobContentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobContentMetadata"},"BatchGetPentestJobTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple pentest job tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobTasks"},"BatchGetPentestJobs":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing jobs in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentestJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentestJobs"},"BatchGetPentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple penetration tests in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetPentests"},"BatchGetSecurityTestContentMetadata":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing contents metadata in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetSecurityTestContentMetadata.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetSecurityTestContentMetadata"},"BatchGetTargetDomains":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to retrieve multiple target domains in a single request","accessLevel":"Read","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetTargetDomains"},"BatchGetTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve multiple security testing tasks in a single request","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_BatchGetTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-BatchGetTasks"},"CreateAgentSpace":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an agent space record","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateAgentSpace"},"CreateApplication":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new application","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole","sso:CreateApplication"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateApplication"},"CreateDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateDesignReview"},"CreateIntegration":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"Application"}],"description":"Grants permission to create a security testing integration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateIntegration"},"CreateMembership":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to add a single member to a agent space with specified role","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateMembership"},"CreateOneTimeLoginSession":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a one time login session","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateOneTimeLoginSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateOneTimeLoginSession"},"CreatePentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to create a new penetration test configuration","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreatePentest"},"CreateSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to add a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateSecurityRequirement"},"CreateTargetDomain":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a target domain record","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_CreateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-CreateTargetDomain"},"DeleteAgentSpace":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteAgentSpace"},"DeleteApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to delete application","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteApplication"},"DeleteArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete an Artifact","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteArtifact"},"DeleteDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to delete a design review","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteDesignReview"},"DeleteIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to delete the integration of an application","accessLevel":"Write","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteIntegration"},"DeleteMembership":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to remove a single member associated to an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteMembership.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteMembership"},"DeleteSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to delete a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteSecurityRequirement"},"DeleteTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to delete a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DeleteTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DeleteTargetDomain"},"DescribeFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve security findings for a penetration test or security testing tasks in a penetration test","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_DescribeFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-DescribeFindings"},"GetApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to get application details by application ID","accessLevel":"Read","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetApplication"},"GetArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve an Artifact for the given Agent Space","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetArtifact"},"GetCodeReviewTask":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve a Code Review Task","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetCodeReviewTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetCodeReviewTask"},"GetDesignReview":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get the status of the associated agent space design review","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReview.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReview"},"GetDesignReviewArtifact":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get design review artifact for a specific document","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewArtifact.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewArtifact"},"GetDesignReviewFeedback":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to get feedback for a design review comment","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDesignReviewFeedback"},"GetDocReviewTask":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to retrieve a document review task","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetDocReviewTask.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetDocReviewTask"},"GetIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to get the integration metadata by ID","accessLevel":"Read","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetIntegration"},"GetSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to retrieve a Security Requirement","accessLevel":"Read","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_GetSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-GetSecurityRequirement"},"InitiateProviderRegistration":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_InitiateProviderRegistration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-InitiateProviderRegistration"},"ListAgentSpaces":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent spaces","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListAgentSpaces.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListAgentSpaces"},"ListApplications":{"conditionKeys":[],"resources":[],"description":"Grants permission to list all applications in the account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListApplications.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListApplications"},"ListArtifacts":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all artifacts for the given project","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListArtifacts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListArtifacts"},"ListDesignReviewComments":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list design review comments","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviewComments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviewComments"},"ListDesignReviews":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all design reviews for the given project","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDesignReviews.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDesignReviews"},"ListDiscoveredEndpoints":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list discovered endpoints associated with a pentest job with optional URI prefix filtering","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListDiscoveredEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListDiscoveredEndpoints"},"ListFindings":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list findings with filtering and pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListFindings"},"ListIntegratedResources":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list integrated resources for an agent space","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegratedResources"},"ListIntegrations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the integrations owned by the caller's AWS account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListIntegrations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListIntegrations"},"ListMemberships":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list all members associated to an agent space with pagination support","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListMemberships.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListMemberships"},"ListPentestJobTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list pentest job tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobTasks"},"ListPentestJobsForPentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration test jobs associated with a penetration test","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentestJobsForPentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentestJobsForPentest"},"ListPentests":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list penetration tests with optional filtering by status","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListPentests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListPentests"},"ListResourcesFromIntegration":{"conditionKeys":[],"resources":[{"name":"Integration"}],"description":"Grants permission to list resources from Integration","accessLevel":"List","resourceTypes":[{"name":"Integration","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListResourcesFromIntegration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListResourcesFromIntegration"},"ListSecurityRequirements":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to list all Security Requirements","accessLevel":"List","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListSecurityRequirements.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListSecurityRequirements"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to list the tags for a resource","accessLevel":"Read","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTagsForResource"},"ListTargetDomains":{"conditionKeys":[],"resources":[],"description":"Grants permission to list target domains","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTargetDomains.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTargetDomains"},"ListTasks":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to list security testing tasks associated with a pentest job","accessLevel":"List","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ListTasks.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ListTasks"},"PutDesignReviewFeedback":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to submit feedback for a design review comment","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_PutDesignReviewFeedback.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-PutDesignReviewFeedback"},"StartCodeRemediation":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to start code remediation for the findings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartCodeRemediation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartCodeRemediation"},"StartPentestExecution":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartPentestExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartPentestExecution"},"StartPentestJob":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to initiate the execution of a penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StartPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StartPentestJob"},"StopPentestExecution":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopPentestExecution.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopPentestExecution"},"StopPentestJob":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to stop the execution of a running penetration test","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_StopPentestJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-StopPentestJob"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to add tags to a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-TagResource"},"ToggleManagedSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to toggle the status of a managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_ToggleManagedSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-ToggleManagedSecurityRequirement"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"AgentSpace"},{"name":"Application"},{"name":"Integration"},{"name":"SecurityRequirementPack"},{"name":"TargetDomain"}],"description":"Grants permission to remove tags from a resource","accessLevel":"Tagging","resourceTypes":[{"name":"AgentSpace","required":false},{"name":"Application","required":false},{"name":"Integration","required":false},{"name":"SecurityRequirementPack","required":false},{"name":"TargetDomain","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UntagResource"},"UpdateAgentSpace":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an agent space record","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateAgentSpace.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateAgentSpace"},"UpdateApplication":{"conditionKeys":[],"resources":[{"name":"Application"}],"description":"Grants permission to update application configuration","accessLevel":"Write","resourceTypes":[{"name":"Application","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateApplication.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateApplication"},"UpdateFinding":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing security finding with new details or status","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateFinding.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateFinding"},"UpdateIntegratedResources":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update integrated resources for an agent space","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateIntegratedResources.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateIntegratedResources"},"UpdatePentest":{"conditionKeys":[],"resources":[{"name":"AgentSpace"}],"description":"Grants permission to update an existing penetration test with new configuration or settings","accessLevel":"Write","resourceTypes":[{"name":"AgentSpace","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdatePentest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdatePentest"},"UpdateSecurityRequirement":{"conditionKeys":[],"resources":[{"name":"SecurityRequirementPack"}],"description":"Grants permission to update a customer managed Security Requirement","accessLevel":"Write","resourceTypes":[{"name":"SecurityRequirementPack","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateSecurityRequirement.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateSecurityRequirement"},"UpdateTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to update a target domain record","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_UpdateTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-UpdateTargetDomain"},"VerifyTargetDomain":{"conditionKeys":[],"resources":[{"name":"TargetDomain"}],"description":"Grants permission to verify ownership for a registered target domain","accessLevel":"Write","resourceTypes":[{"name":"TargetDomain","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityagent/API_VerifyTargetDomain.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html#awssecurityagent-VerifyTargetDomain"}},"resources":[{"name":"AgentSpace","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Application","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"Integration","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"SecurityRequirementPack","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/${SecurityRequirementPackId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"TargetDomain","arnFormats":["arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags that are passed in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by the tags associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by the tag keys that are passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityagent.html"}

package/src/data/servicereference/services/securityhub.json

@@ -1 +1 @@
-{"name":"securityhub","actions":{"AcceptAdministratorInvitation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to accept Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"AcceptInvitation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to accept Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to log delivery for resources","accessLevel":"Permissions management","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"permissionOnly":true},"BatchDeleteAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to delete one or more automation rules in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"automation-rule","required":true}]},"BatchDisableStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable standards in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"BatchEnableStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to enable standards in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"BatchGetAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to retrieve a list of details for automation rules from Security Hub based on rule Amazon Resource Names (ARNs)","accessLevel":"Read","resourceTypes":[{"name":"automation-rule","required":true}]},"BatchGetConfigurationPolicyAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about configuration policies associated with a specific list of member accounts and organizational units of the calling account's organization","accessLevel":"Read","resourceTypes":[]},"BatchGetControlEvaluations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to get the enablement and compliance status of controls, the findings count for controls, and the overall security score for controls on the Security Hub console","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"BatchGetSecurityControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to get details about specific security controls identified by ID or ARN","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"]},"BatchGetStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the enablement status of a batch of security controls in standards","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"]},"BatchImportFindings":{"conditionKeys":["securityhub:TargetAccount"],"resources":[{"name":"product"}],"description":"Grants permission to import findings into Security Hub from an integrated product","accessLevel":"Write","resourceTypes":[{"name":"product","required":true}]},"BatchUpdateAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to update one or more automation rules from Security Hub based on rule Amazon Resource Names (ARNs) and input parameters","accessLevel":"Write","resourceTypes":[{"name":"automation-rule","required":true}]},"BatchUpdateFindings":{"conditionKeys":["securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}","securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to update customer-controlled fields for a selected set of Security Hub findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}]},"BatchUpdateStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the enablement status of a batch of security controls in standards","accessLevel":"Write","resourceTypes":[],"dependentActions":["securityhub:UpdateStandardsControl"]},"ConnectorRegistrationsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters","accessLevel":"Write","resourceTypes":[]},"CreateActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"CreateAggregatorV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[]},"CreateAutomationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an automation rule based on input parameters","accessLevel":"Write","resourceTypes":[]},"CreateAutomationRuleV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an automation rule V2 based on input parameters","accessLevel":"Write","resourceTypes":[]},"CreateConfigurationPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a configuration policy to manage organization member settings in Security Hub","accessLevel":"Write","resourceTypes":[]},"CreateConnectorV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connector V2 based on input parameters","accessLevel":"Write","resourceTypes":[]},"CreateFindingAggregator":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a finding aggregator, which contains the cross-Region finding aggregation configuration","accessLevel":"Write","resourceTypes":[]},"CreateInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create insights in Security Hub. Insights are collections of related findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"CreateMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create member accounts in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"CreateTicketV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to create ticket for a selected OCSF finding","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":false}]},"DeclineInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to decline Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DeleteActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DeleteAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to delete an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"aggregatorv2","required":true}]},"DeleteAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to delete an automation rule V2 in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"automation-rulev2","required":true}]},"DeleteConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to delete an existing configuration policy","accessLevel":"Write","resourceTypes":[{"name":"configuration-policy","required":true}]},"DeleteConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to delete a connector V2 in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":true}]},"DeleteFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to delete a finding aggregator, which disables finding aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"finding-aggregator","required":true}]},"DeleteInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete insights from Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DeleteInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DeleteMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete Security Hub member accounts","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DescribeActionTargets":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of custom actions using the API","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DescribeHub":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about the hub resource in your account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DescribeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to describe the organization configuration for Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DescribeProducts":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about the available Security Hub product integrations","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DescribeProductsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve information about the available Security Hub V2 product integrations","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}]},"DescribeSecurityHubV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the hub V2 resource in your account","accessLevel":"Read","resourceTypes":[]},"DescribeStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub standards","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DescribeStandardsControls":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub standards controls","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"DisableImportFindingsForProduct":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable the findings importing for a Security Hub integrated product","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DisableOrganizationAdminAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to remove the Security Hub administrator account for your organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:DescribeOrganization","organizations:ListDelegatedAdministrators"]},"DisableSecurityHub":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DisableSecurityHubV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable Security Hub V2","accessLevel":"Write","resourceTypes":[]},"DisassociateFromAdministratorAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to a Security Hub member account to disassociate from the associated administrator account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DisassociateFromMasterAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to a Security Hub member account to disassociate from the associated master account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"DisassociateMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disassociate Security Hub member accounts from the associated administrator account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"EnableImportFindingsForProduct":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to enable the findings importing for a Security Hub integrated product","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"EnableOrganizationAdminAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to designate a Security Hub administrator account for your organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DescribeOrganization","organizations:EnableAWSServiceAccess","organizations:ListAWSServiceAccessForOrganization","organizations:ListDelegatedAdministrators","organizations:RegisterDelegatedAdministrator"]},"EnableSecurityHub":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"hub"}],"description":"Grants permission to enable Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"EnableSecurityHubV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to enable Security Hub V2","accessLevel":"Write","resourceTypes":[]},"GetAdhocInsightResults":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to retrieve aggregated statistical data about the findings","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"permissionOnly":true},"GetAdministratorAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about the Security Hub administrator account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to retrieve details for an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Read","resourceTypes":[{"name":"aggregatorv2","required":true}]},"GetAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to retrieve details for an automation rule V2 from Security Hub based on rule Amazon Resource Name (ARN)","accessLevel":"Read","resourceTypes":[{"name":"automation-rulev2","required":true}]},"GetConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to get a complete overview of one configuration policy created by the calling account","accessLevel":"Read","resourceTypes":[{"name":"configuration-policy","required":true}]},"GetConfigurationPolicyAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a configuration policy associated with a member account or organizational unit of the calling account's organization","accessLevel":"Read","resourceTypes":[]},"GetConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to retrieve details for a connector V2 from Security Hub based on connector id","accessLevel":"Read","resourceTypes":[{"name":"connectorv2","required":true}]},"GetControlFindingSummary":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a security score and counts of finding and control statuses for a security standard","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"GetEnabledStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of the standards that are enabled in Security Hub","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}]},"GetFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to retrieve details for a finding aggregator, which configures finding aggregation across Regions","accessLevel":"Read","resourceTypes":[{"name":"finding-aggregator","required":true}]},"GetFindingHistory":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of finding history from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetFindings":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to retrieve a list of findings from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}]},"GetFindingsTrendsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve findings trends","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}]},"GetFreeTrialEndDate":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the end date for an account's free trial of Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"GetFreeTrialUsage":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub usage during the free trial period","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"GetInsightFindingTrend":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve an insight finding trend from Security Hub in order to generate a graph","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"GetInsightResults":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve insight results from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetInsights":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve Security Hub insights","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}]},"GetInvitationsCount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the count of Security Hub membership invitations sent to the account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetMasterAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about the Security Hub master account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the details of Security Hub member accounts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}]},"GetResourcesStatisticsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve aggregate statistics about resources","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}]},"GetResourcesTrendsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve resources trends","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}]},"GetResourcesV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve a list of resources","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}]},"GetSecurityControlDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the definition details of a specific security control identified by ID","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"]},"GetUsage":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub usage by accounts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"InviteMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to invite other AWS accounts to become Security Hub member accounts","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"ListAggregatorsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions","accessLevel":"List","resourceTypes":[]},"ListAutomationRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of automation rules and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[]},"ListAutomationRulesV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of automation rules V2 and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[]},"ListConfigurationPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the summaries of all configuration policies created by the calling account","accessLevel":"List","resourceTypes":[]},"ListConfigurationPolicyAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all configuration policies associationed with all member accounts and organizational units of the calling account's organization","accessLevel":"List","resourceTypes":[]},"ListConnectorsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[]},"ListControlEvaluationSummaries":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of controls for a standard, including the control IDs, statuses and finding counts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"ListEnabledProductsForImport":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the Security Hub integrated products that are currently enabled","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}]},"ListFindingAggregators":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of finding aggregators, which contain the cross-Region finding aggregation configuration","accessLevel":"List","resourceTypes":[]},"ListInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the Security Hub invitations sent to the account","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}]},"ListMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about Security Hub member accounts associated with the administrator account","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}]},"ListOrganizationAdminAccounts":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to list the Security Hub administrator accounts for your organization","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DescribeOrganization","organizations:ListDelegatedAdministrators"]},"ListSecurityControlDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of security control definitions, which contain details for security controls in the current region","accessLevel":"List","resourceTypes":[]},"ListStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the enablement status of a security control in standards","accessLevel":"List","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"]},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"automation-rule"},{"name":"configuration-policy"},{"name":"hub"}],"description":"Grants permission to list of tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"automation-rule","required":false},{"name":"configuration-policy","required":false},{"name":"hub","required":false}]},"SendFindingEvents":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to use a custom action to send Security Hub findings to Amazon EventBridge","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"SendInsightEvents":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to use a custom action to send Security Hub insights to Amazon EventBridge","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true},"StartConfigurationPolicyAssociation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to associate a configuration policy with a member account or organizational unit in the calling account's organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"StartConfigurationPolicyDisassociation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to remove a configuration policy association from a member account or organizational unit in the calling account's organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"TagResource":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"},{"name":"automation-rule"},{"name":"automation-rulev2"},{"name":"configuration-policy"},{"name":"connectorv2"},{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to add tags to a Security Hub resource","accessLevel":"Tagging","resourceTypes":[{"name":"aggregatorv2","required":false},{"name":"automation-rule","required":false},{"name":"automation-rulev2","required":false},{"name":"configuration-policy","required":false},{"name":"connectorv2","required":false},{"name":"hub","required":false},{"name":"hubv2","required":false}]},"UntagResource":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"},{"name":"automation-rule"},{"name":"automation-rulev2"},{"name":"configuration-policy"},{"name":"connectorv2"},{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to remove tags from a Security Hub resource","accessLevel":"Tagging","resourceTypes":[{"name":"aggregatorv2","required":false},{"name":"automation-rule","required":false},{"name":"automation-rulev2","required":false},{"name":"configuration-policy","required":false},{"name":"connectorv2","required":false},{"name":"hub","required":false},{"name":"hubv2","required":false}]},"UpdateActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"UpdateAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to update an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"aggregatorv2","required":true}]},"UpdateAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to update an automation rule V2 in Security Hub based on rule Amazon Resource Name (ARN) and input parameters","accessLevel":"Write","resourceTypes":[{"name":"automation-rulev2","required":true}]},"UpdateConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to update an existing configuration policy","accessLevel":"Write","resourceTypes":[{"name":"configuration-policy","required":true}]},"UpdateConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to update a connector V2 in Security Hub based on connector id and input parameters","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":true}]},"UpdateFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to update a finding aggregator, which contains the cross-Region finding aggregation configuration","accessLevel":"Write","resourceTypes":[{"name":"finding-aggregator","required":true}]},"UpdateFindings":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"UpdateInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update insights in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"UpdateOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update the organization configuration for Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"UpdateSecurityControl":{"conditionKeys":[],"resources":[],"description":"Grants permission to update properties of a specific security control identified by ID or ARN","accessLevel":"Write","resourceTypes":[],"dependentActions":["securityhub:UpdateStandardsControl"]},"UpdateSecurityHubConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub configuration","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]},"UpdateStandardsControl":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub standards controls","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}]}},"resources":[{"name":"aggregatorv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/${AggregatorV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automation-rule","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automation-rulev2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"configuration-policy","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/${ConfigurationPolicyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connectorv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"finding-aggregator","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/${FindingAggregatorId}"],"conditionKeys":[]},{"name":"hub","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:hub/default"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"hubv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:hubv2/${HubV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"product","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:product/${Company}/${ProductId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by actions based on the presence of tag keys in the request"},"securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}":{"types":["String"],"description":"Filters access by the specified fields and values in the request"},"securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}":{"types":["String"],"description":"Filters access by the specified fields and values in the request"},"securityhub:TargetAccount":{"types":["String"],"description":"Filters access by the AwsAccountId field that is specified in the request"}}}
+{"name":"securityhub","actions":{"AcceptAdministratorInvitation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to accept Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptAdministratorInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-AcceptAdministratorInvitation"},"AcceptInvitation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to accept Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AcceptInvitation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-AcceptInvitation"},"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to log delivery for resources","accessLevel":"Permissions management","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AllowVendedLogDeliveryForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-AllowVendedLogDeliveryForResource"},"BatchDeleteAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to delete one or more automation rules in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"automation-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchDeleteAutomationRules"},"BatchDisableStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable standards in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchDisableStandards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchDisableStandards"},"BatchEnableStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to enable standards in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchEnableStandards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchEnableStandards"},"BatchGetAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to retrieve a list of details for automation rules from Security Hub based on rule Amazon Resource Names (ARNs)","accessLevel":"Read","resourceTypes":[{"name":"automation-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchGetAutomationRules"},"BatchGetConfigurationPolicyAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about configuration policies associated with a specific list of member accounts and organizational units of the calling account's organization","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetConfigurationPolicyAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchGetConfigurationPolicyAssociations"},"BatchGetControlEvaluations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to get the enablement and compliance status of controls, the findings count for controls, and the overall security score for controls on the Security Hub console","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/iam-permissions-controls-standards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchGetControlEvaluations"},"BatchGetSecurityControls":{"conditionKeys":[],"resources":[],"description":"Grants permission to get details about specific security controls identified by ID or ARN","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetSecurityControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchGetSecurityControls"},"BatchGetStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the enablement status of a batch of security controls in standards","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchGetStandardsControlAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchGetStandardsControlAssociations"},"BatchImportFindings":{"conditionKeys":["securityhub:TargetAccount"],"resources":[{"name":"product"}],"description":"Grants permission to import findings into Security Hub from an integrated product","accessLevel":"Write","resourceTypes":[{"name":"product","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchImportFindings"},"BatchUpdateAutomationRules":{"conditionKeys":[],"resources":[{"name":"automation-rule"}],"description":"Grants permission to update one or more automation rules from Security Hub based on rule Amazon Resource Names (ARNs) and input parameters","accessLevel":"Write","resourceTypes":[{"name":"automation-rule","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchUpdateAutomationRules"},"BatchUpdateFindings":{"conditionKeys":["securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}","securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to update customer-controlled fields for a selected set of Security Hub findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindingsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchUpdateFindings"},"BatchUpdateStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to update the enablement status of a batch of security controls in standards","accessLevel":"Write","resourceTypes":[],"dependentActions":["securityhub:UpdateStandardsControl"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-BatchUpdateStandardsControlAssociations"},"ConnectorRegistrationsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ConnectorRegistrationsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ConnectorRegistrationsV2"},"CreateActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateActionTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateActionTarget"},"CreateAggregatorV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to create an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateAggregatorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateAggregatorV2"},"CreateAutomationRule":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an automation rule based on input parameters","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateAutomationRule"},"CreateAutomationRuleV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create an automation rule V2 based on input parameters","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateAutomationRuleV2"},"CreateConfigurationPolicy":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a configuration policy to manage organization member settings in Security Hub","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConfigurationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateConfigurationPolicy"},"CreateConnectorV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a connector V2 based on input parameters","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateConnectorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateConnectorV2"},"CreateFindingAggregator":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a finding aggregator, which contains the cross-Region finding aggregation configuration","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateFindingAggregator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateFindingAggregator"},"CreateInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create insights in Security Hub. Insights are collections of related findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateInsight.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateInsight"},"CreateMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to create member accounts in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateMembers"},"CreateTicketV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to create ticket for a selected OCSF finding","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_CreateTicketV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-CreateTicketV2"},"DeclineInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to decline Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeclineInvitations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeclineInvitations"},"DeleteActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteActionTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteActionTarget"},"DeleteAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to delete an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"aggregatorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteAggregatorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteAggregatorV2"},"DeleteAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to delete an automation rule V2 in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"automation-rulev2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteAutomationRuleV2"},"DeleteConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to delete an existing configuration policy","accessLevel":"Write","resourceTypes":[{"name":"configuration-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConfigurationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteConfigurationPolicy"},"DeleteConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to delete a connector V2 in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteConnectorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteConnectorV2"},"DeleteFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to delete a finding aggregator, which disables finding aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"finding-aggregator","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteFindingAggregator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteFindingAggregator"},"DeleteInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete insights from Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInsight.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteInsight"},"DeleteInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete Security Hub invitations to become a member account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteInvitations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteInvitations"},"DeleteMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to delete Security Hub member accounts","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DeleteMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DeleteMembers"},"DescribeActionTargets":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of custom actions using the API","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeActionTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeActionTargets"},"DescribeHub":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about the hub resource in your account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeHub.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeHub"},"DescribeOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to describe the organization configuration for Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeOrganizationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeOrganizationConfiguration"},"DescribeProducts":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about the available Security Hub product integrations","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProducts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeProducts"},"DescribeProductsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve information about the available Security Hub V2 product integrations","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeProductsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeProductsV2"},"DescribeSecurityHubV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about the hub V2 resource in your account","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeSecurityHubV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeSecurityHubV2"},"DescribeStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub standards","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeStandards"},"DescribeStandardsControls":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub standards controls","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandardsControls.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DescribeStandardsControls"},"DisableImportFindingsForProduct":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable the findings importing for a Security Hub integrated product","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableImportFindingsForProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisableImportFindingsForProduct"},"DisableOrganizationAdminAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to remove the Security Hub administrator account for your organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DeregisterDelegatedAdministrator","organizations:DescribeOrganization","organizations:ListDelegatedAdministrators"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableOrganizationAdminAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisableOrganizationAdminAccount"},"DisableSecurityHub":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disable Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHub.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisableSecurityHub"},"DisableSecurityHubV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to disable Security Hub V2","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisableSecurityHubV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisableSecurityHubV2"},"DisassociateFromAdministratorAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to a Security Hub member account to disassociate from the associated administrator account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromAdministratorAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisassociateFromAdministratorAccount"},"DisassociateFromMasterAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to a Security Hub member account to disassociate from the associated master account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateFromMasterAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisassociateFromMasterAccount"},"DisassociateMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to disassociate Security Hub member accounts from the associated administrator account","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DisassociateMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-DisassociateMembers"},"EnableImportFindingsForProduct":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to enable the findings importing for a Security Hub integrated product","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-EnableImportFindingsForProduct"},"EnableOrganizationAdminAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to designate a Security Hub administrator account for your organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DescribeOrganization","organizations:EnableAWSServiceAccess","organizations:ListAWSServiceAccessForOrganization","organizations:ListDelegatedAdministrators","organizations:RegisterDelegatedAdministrator"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableOrganizationAdminAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-EnableOrganizationAdminAccount"},"EnableSecurityHub":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"hub"}],"description":"Grants permission to enable Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHub.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-EnableSecurityHub"},"EnableSecurityHubV2":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to enable Security Hub V2","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_EnableSecurityHubV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-EnableSecurityHubV2"},"GetAdhocInsightResults":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to retrieve aggregated statistical data about the findings","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingStatisticsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetAdhocInsightResults"},"GetAdministratorAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about the Security Hub administrator account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAdministratorAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetAdministratorAccount"},"GetAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to retrieve details for an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Read","resourceTypes":[{"name":"aggregatorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetAggregatorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetAggregatorV2"},"GetAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to retrieve details for an automation rule V2 from Security Hub based on rule Amazon Resource Name (ARN)","accessLevel":"Read","resourceTypes":[{"name":"automation-rulev2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetAutomationRuleV2"},"GetConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to get a complete overview of one configuration policy created by the calling account","accessLevel":"Read","resourceTypes":[{"name":"configuration-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetConfigurationPolicy"},"GetConfigurationPolicyAssociation":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about a configuration policy associated with a member account or organizational unit of the calling account's organization","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConfigurationPolicyAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetConfigurationPolicyAssociation"},"GetConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to retrieve details for a connector V2 from Security Hub based on connector id","accessLevel":"Read","resourceTypes":[{"name":"connectorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetConnectorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetConnectorV2"},"GetControlFindingSummary":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a security score and counts of finding and control statuses for a security standard","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetControlFindingSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetControlFindingSummary"},"GetEnabledStandards":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of the standards that are enabled in Security Hub","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetEnabledStandards.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetEnabledStandards"},"GetFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to retrieve details for a finding aggregator, which configures finding aggregation across Regions","accessLevel":"Read","resourceTypes":[{"name":"finding-aggregator","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingAggregator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFindingAggregator"},"GetFindingHistory":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of finding history from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingHistory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFindingHistory"},"GetFindings":{"conditionKeys":[],"resources":[{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to retrieve a list of findings from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false},{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFindings"},"GetFindingsTrendsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve findings trends","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsTrendsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFindingsTrendsV2"},"GetFreeTrialEndDate":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the end date for an account's free trial of Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialEndDate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFreeTrialEndDate"},"GetFreeTrialUsage":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub usage during the free trial period","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialUsage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetFreeTrialUsage"},"GetInsightFindingTrend":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve an insight finding trend from Security Hub in order to generate a graph","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightFindingTrend.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetInsightFindingTrend"},"GetInsightResults":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve insight results from Security Hub","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsightResults.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetInsightResults"},"GetInsights":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve Security Hub insights","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInsights.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetInsights"},"GetInvitationsCount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the count of Security Hub membership invitations sent to the account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetInvitationsCount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetInvitationsCount"},"GetMasterAccount":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about the Security Hub master account","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMasterAccount.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetMasterAccount"},"GetMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the details of Security Hub member accounts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetMembers"},"GetResourcesStatisticsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve aggregate statistics about resources","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesStatisticsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetResourcesStatisticsV2"},"GetResourcesTrendsV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve resources trends","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesTrendsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetResourcesTrendsV2"},"GetResourcesV2":{"conditionKeys":[],"resources":[{"name":"hubv2"}],"description":"Grants permission to retrieve a list of resources","accessLevel":"Read","resourceTypes":[{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetResourcesV2"},"GetSecurityControlDefinition":{"conditionKeys":[],"resources":[],"description":"Grants permission to get the definition details of a specific security control identified by ID","accessLevel":"Read","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetSecurityControlDefinition.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetSecurityControlDefinition"},"GetUsage":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve information about Security Hub usage by accounts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetUsage.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-GetUsage"},"InviteMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to invite other AWS accounts to become Security Hub member accounts","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_InviteMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-InviteMembers"},"ListAggregatorsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListAggregatorsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListAggregatorsV2"},"ListAutomationRules":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of automation rules and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListAutomationRules"},"ListAutomationRulesV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of automation rules V2 and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListAutomationRulesV2"},"ListConfigurationPolicies":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the summaries of all configuration policies created by the calling account","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListConfigurationPolicies"},"ListConfigurationPolicyAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve information about all configuration policies associationed with all member accounts and organizational units of the calling account's organization","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConfigurationPolicyAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListConfigurationPolicyAssociations"},"ListConnectorsV2":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListConnectorsV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListConnectorsV2"},"ListControlEvaluationSummaries":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve a list of controls for a standard, including the control IDs, statuses and finding counts","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListControlEvaluationSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListControlEvaluationSummaries"},"ListEnabledProductsForImport":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the Security Hub integrated products that are currently enabled","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListEnabledProductsForImport.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListEnabledProductsForImport"},"ListFindingAggregators":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of finding aggregators, which contain the cross-Region finding aggregation configuration","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListFindingAggregators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListFindingAggregators"},"ListInvitations":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve the Security Hub invitations sent to the account","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListInvitations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListInvitations"},"ListMembers":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to retrieve details about Security Hub member accounts associated with the administrator account","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListMembers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListMembers"},"ListOrganizationAdminAccounts":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to list the Security Hub administrator accounts for your organization","accessLevel":"List","resourceTypes":[{"name":"hub","required":false}],"dependentActions":["organizations:DescribeOrganization","organizations:ListDelegatedAdministrators"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListOrganizationAdminAccounts.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListOrganizationAdminAccounts"},"ListSecurityControlDefinitions":{"conditionKeys":[],"resources":[],"description":"Grants permission to retrieve a list of security control definitions, which contain details for security controls in the current region","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListSecurityControlDefinitions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListSecurityControlDefinitions"},"ListStandardsControlAssociations":{"conditionKeys":[],"resources":[],"description":"Grants permission to list the enablement status of a security control in standards","accessLevel":"List","resourceTypes":[],"dependentActions":["securityhub:DescribeStandardsControls"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListStandardsControlAssociations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListStandardsControlAssociations"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"automation-rule"},{"name":"configuration-policy"},{"name":"hub"}],"description":"Grants permission to list of tags associated with a resource","accessLevel":"Read","resourceTypes":[{"name":"automation-rule","required":false},{"name":"configuration-policy","required":false},{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-ListTagsForResource"},"SendFindingEvents":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to use a custom action to send Security Hub findings to Amazon EventBridge","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendFindingEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-SendFindingEvents"},"SendInsightEvents":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to use a custom action to send Security Hub insights to Amazon EventBridge","accessLevel":"Read","resourceTypes":[{"name":"hub","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_SendInsightEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-SendInsightEvents"},"StartConfigurationPolicyAssociation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to associate a configuration policy with a member account or organizational unit in the calling account's organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyAssociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-StartConfigurationPolicyAssociation"},"StartConfigurationPolicyDisassociation":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to remove a configuration policy association from a member account or organizational unit in the calling account's organization","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_StartConfigurationPolicyDisassociation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-StartConfigurationPolicyDisassociation"},"TagResource":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"},{"name":"automation-rule"},{"name":"automation-rulev2"},{"name":"configuration-policy"},{"name":"connectorv2"},{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to add tags to a Security Hub resource","accessLevel":"Tagging","resourceTypes":[{"name":"aggregatorv2","required":false},{"name":"automation-rule","required":false},{"name":"automation-rulev2","required":false},{"name":"configuration-policy","required":false},{"name":"connectorv2","required":false},{"name":"hub","required":false},{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-TagResource"},"UntagResource":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"},{"name":"automation-rule"},{"name":"automation-rulev2"},{"name":"configuration-policy"},{"name":"connectorv2"},{"name":"hub"},{"name":"hubv2"}],"description":"Grants permission to remove tags from a Security Hub resource","accessLevel":"Tagging","resourceTypes":[{"name":"aggregatorv2","required":false},{"name":"automation-rule","required":false},{"name":"automation-rulev2","required":false},{"name":"configuration-policy","required":false},{"name":"connectorv2","required":false},{"name":"hub","required":false},{"name":"hubv2","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UntagResource"},"UpdateActionTarget":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update custom actions in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateActionTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateActionTarget"},"UpdateAggregatorV2":{"conditionKeys":[],"resources":[{"name":"aggregatorv2"}],"description":"Grants permission to update an aggregatorV2, which configures data aggregation across Regions","accessLevel":"Write","resourceTypes":[{"name":"aggregatorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateAggregatorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateAggregatorV2"},"UpdateAutomationRuleV2":{"conditionKeys":[],"resources":[{"name":"automation-rulev2"}],"description":"Grants permission to update an automation rule V2 in Security Hub based on rule Amazon Resource Name (ARN) and input parameters","accessLevel":"Write","resourceTypes":[{"name":"automation-rulev2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateAutomationRuleV2"},"UpdateConfigurationPolicy":{"conditionKeys":[],"resources":[{"name":"configuration-policy"}],"description":"Grants permission to update an existing configuration policy","accessLevel":"Write","resourceTypes":[{"name":"configuration-policy","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConfigurationPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateConfigurationPolicy"},"UpdateConnectorV2":{"conditionKeys":[],"resources":[{"name":"connectorv2"}],"description":"Grants permission to update a connector V2 in Security Hub based on connector id and input parameters","accessLevel":"Write","resourceTypes":[{"name":"connectorv2","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateConnectorV2.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateConnectorV2"},"UpdateFindingAggregator":{"conditionKeys":[],"resources":[{"name":"finding-aggregator"}],"description":"Grants permission to update a finding aggregator, which contains the cross-Region finding aggregation configuration","accessLevel":"Write","resourceTypes":[{"name":"finding-aggregator","required":true}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindingAggregator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateFindingAggregator"},"UpdateFindings":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub findings","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindings.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateFindings"},"UpdateInsight":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update insights in Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateInsight.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateInsight"},"UpdateOrganizationConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update the organization configuration for Security Hub","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateOrganizationConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateOrganizationConfiguration"},"UpdateSecurityControl":{"conditionKeys":[],"resources":[],"description":"Grants permission to update properties of a specific security control identified by ID or ARN","accessLevel":"Write","resourceTypes":[],"dependentActions":["securityhub:UpdateStandardsControl"],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateSecurityControl"},"UpdateSecurityHubConfiguration":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub configuration","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateSecurityHubConfiguration"},"UpdateStandardsControl":{"conditionKeys":[],"resources":[{"name":"hub"}],"description":"Grants permission to update Security Hub standards controls","accessLevel":"Write","resourceTypes":[{"name":"hub","required":false}],"operationUrl":"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateStandardsControl.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html#awssecurityhub-UpdateStandardsControl"}},"resources":[{"name":"aggregatorv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/${AggregatorV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automation-rule","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"automation-rulev2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"configuration-policy","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/${ConfigurationPolicyId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"connectorv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"finding-aggregator","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/${FindingAggregatorId}"],"conditionKeys":[]},{"name":"hub","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:hub/default"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"hubv2","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:hubv2/${HubV2Id}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"product","arnFormats":["arn:${Partition}:securityhub:${Region}:${Account}:product/${Company}/${ProductId}"],"conditionKeys":[]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on the presence of tag key-value pairs in the request"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by actions based on tag key-value pairs attached to the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by actions based on the presence of tag keys in the request"},"securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}":{"types":["String"],"description":"Filters access by the specified fields and values in the request"},"securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}":{"types":["String"],"description":"Filters access by the specified fields and values in the request"},"securityhub:TargetAccount":{"types":["String"],"description":"Filters access by the AwsAccountId field that is specified in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecurityhub.html"}