config:PutRetentionConfiguration is a Write access-level action in the config service. Grants permission to create and update the retention configuration with details about retention period (number of days) that AWS Config stores your historical information
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows config:PutRetentionConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowConfigPutRetentionConfiguration",
"Effect": "Allow",
"Action": "config:PutRetentionConfiguration",
"Resource": "*"
}
]
}