detective:CreateGraph is a Write access-level action in the detective service. Grants permission to create a behavior graph and begin to aggregate security information
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants detective:CreateGraph.
Filters access by specifying the tags that are passed in the request
Filters access by specifying the tags associated with the resource
Filters access by specifying the tag keys that are passed in the request
A minimal policy that allows detective:CreateGraph. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDetectiveCreateGraph",
"Effect": "Allow",
"Action": "detective:CreateGraph",
"Resource": "*"
}
]
}