cloudformation:ListResourceScans is a List access-level action in the cloudformation service. Grants permission to list the resource scans from newest to oldest. By default it will return up to 10 resource scans
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows cloudformation:ListResourceScans. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationListResourceScans",
"Effect": "Allow",
"Action": "cloudformation:ListResourceScans",
"Resource": "*"
}
]
}