detective

36 actions in the detective service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

detective:AcceptInvitation

Write

Grants permission to accept an invitation to become a member of a behavior graph

detective:BatchGetGraphMemberDatasources

Read

Grants permission to retrieve the datasource package history for the specified member accounts in a behavior graph managed by this account

detective:BatchGetMembershipDatasources

Read

Grants permission to retrieve the datasource package history of the caller account for the specified graphs

detective:CreateGraph

Write

Grants permission to create a behavior graph and begin to aggregate security information

detective:CreateMembers

Write

Grants permission to request the membership of one or more accounts in a behavior graph managed by this account

detective:DeleteGraph

Write

Grants permission to delete a behavior graph and stop aggregating security information

detective:DeleteMembers

Write

Grants permission to remove member accounts from a behavior graph managed by this account

detective:DescribeOrganizationConfiguration

Read

Grants permission to view the current configuration related to the Amazon Detective integration with AWS Organizations

detective:DisableOrganizationAdminAccount

Write

Grants permission to remove the Amazon Detective delegated administrator account for an organization

detective:DisassociateMembership

Write

Grants permission to remove the association of this account with a behavior graph

detective:EnableOrganizationAdminAccount

Write

Grants permission to designate the Amazon Detective delegated administrator account for an organization

detective:GetFreeTrialEligibility

Read

Grants permission to retrieve a behavior graph's eligibility for a free trial period

detective:GetGraphIngestState

Read

Grants permission to retrieve the data ingestion state of a behavior graph

detective:GetInvestigation

Read

Grants permission to get an investigation's status and metadata

detective:GetMembers

Read

Grants permission to retrieve details on specified members of a behavior graph

detective:GetPricingInformation

Read

Grants permission to retrieve information about Amazon Detective's pricing

detective:GetUsageInformation

Read

Grants permission to list usage information of a behavior graph

detective:InvokeAssistant

Read

Grants permission to invoke Detective's Assistant

detective:ListDatasourcePackages

List

Grants permission to list a graph's datasource package ingest states and timestamps for the most recent state changes in a behavior graph managed by this account

detective:ListGraphs

List

Grants permission to list behavior graphs managed by this account

detective:ListHighDegreeEntities

List

Grants permission to retrieve high volume entities whose relationships cannot be stored by Detective

detective:ListIndicators

List

Grants permission to list the indicators of an investigation

detective:ListInvestigations

List

Grants permission to list the investigations of a behavior graph

detective:ListInvitations

List

Grants permission to retrieve details on the behavior graphs to which this account has been invited to join

detective:ListMembers

List

Grants permission to retrieve details on all members of a behavior graph

detective:ListOrganizationAdminAccount

List

Grants permission to view the current Amazon Detective delegated administrator account for an organization

detective:ListTagsForResource

List

Grants permission to list the tag values that are assigned to a behavior graph

detective:RejectInvitation

Write

Grants permission to reject an invitation to become a member of a behavior graph

detective:SearchGraph

Read

Grants permission to search the data stored in a behavior graph

detective:StartInvestigation

Write

Grants permission to start investigations

detective:StartMonitoringMember

Write

Grants permission to start data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED

detective:TagResource

Tagging

Grants permission to assign tag values to a behavior graph

detective:UntagResource

Tagging

Grants permission to remove tag values from a behavior graph

detective:UpdateDatasourcePackages

Write

Grants permission to enable or disable datasource package(s) in a behavior graph managed by this account

detective:UpdateInvestigationState

Write

Grants permission to update an investigation's state and metadata

detective:UpdateOrganizationConfiguration

Write

Grants permission to update the current configuration related to the Amazon Detective integration with AWS Organizations