36 actions in the detective service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to accept an invitation to become a member of a behavior graph
Grants permission to retrieve the datasource package history for the specified member accounts in a behavior graph managed by this account
Grants permission to retrieve the datasource package history of the caller account for the specified graphs
Grants permission to create a behavior graph and begin to aggregate security information
Grants permission to request the membership of one or more accounts in a behavior graph managed by this account
Grants permission to delete a behavior graph and stop aggregating security information
Grants permission to remove member accounts from a behavior graph managed by this account
Grants permission to view the current configuration related to the Amazon Detective integration with AWS Organizations
Grants permission to remove the Amazon Detective delegated administrator account for an organization
Grants permission to remove the association of this account with a behavior graph
Grants permission to designate the Amazon Detective delegated administrator account for an organization
Grants permission to retrieve a behavior graph's eligibility for a free trial period
Grants permission to retrieve the data ingestion state of a behavior graph
Grants permission to get an investigation's status and metadata
Grants permission to retrieve details on specified members of a behavior graph
Grants permission to retrieve information about Amazon Detective's pricing
Grants permission to list usage information of a behavior graph
Grants permission to invoke Detective's Assistant
Grants permission to list a graph's datasource package ingest states and timestamps for the most recent state changes in a behavior graph managed by this account
Grants permission to list behavior graphs managed by this account
Grants permission to retrieve high volume entities whose relationships cannot be stored by Detective
Grants permission to list the indicators of an investigation
Grants permission to list the investigations of a behavior graph
Grants permission to retrieve details on the behavior graphs to which this account has been invited to join
Grants permission to retrieve details on all members of a behavior graph
Grants permission to view the current Amazon Detective delegated administrator account for an organization
Grants permission to list the tag values that are assigned to a behavior graph
Grants permission to reject an invitation to become a member of a behavior graph
Grants permission to search the data stored in a behavior graph
Grants permission to start investigations
Grants permission to start data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED
Grants permission to assign tag values to a behavior graph
Grants permission to remove tag values from a behavior graph
Grants permission to enable or disable datasource package(s) in a behavior graph managed by this account
Grants permission to update an investigation's state and metadata
Grants permission to update the current configuration related to the Amazon Detective integration with AWS Organizations