discovery:DescribeImportTasks is a List access-level action in the discovery service. Grants permission to DescribeImportTasks API. DescribeImportTasks returns an array of import tasks for your user, including status information, times, IDs, the Amazon S3 Object URL for the import file, and more
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows discovery:DescribeImportTasks. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDiscoveryDescribeImportTasks",
"Effect": "Allow",
"Action": "discovery:DescribeImportTasks",
"Resource": "*"
}
]
}