chime:GetUserByEmail is a Read access-level action in the chime service. Grants permission to get user details for an Amazon Chime user based on the email address in an Amazon Chime Enterprise or Team account
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows chime:GetUserByEmail. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowChimeGetUserByEmail",
"Effect": "Allow",
"Action": "chime:GetUserByEmail",
"Resource": "*"
}
]
}