auditmanager:CreateControl is a Write access-level action in the auditmanager service. Grants permission to create a control to be used in AWS Audit Manager
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants auditmanager:CreateControl.
Filters access by the tags that are passed in the request
Filters access by the tags associated with the resource
Filters access by the tag keys that are passed in the request
A minimal policy that allows auditmanager:CreateControl. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAuditmanagerCreateControl",
"Effect": "Allow",
"Action": "auditmanager:CreateControl",
"Resource": "*"
}
]
}