discovery:ExportConfigurations is a Write access-level action in the discovery service. Grants permission to ExportConfigurations API. ExportConfigurations exports all discovered configuration data to an Amazon S3 bucket or an application that enables you to view and evaluate the data. Data includes tags and tag associations, processes, connections, servers, and system performance
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows discovery:ExportConfigurations. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDiscoveryExportConfigurations",
"Effect": "Allow",
"Action": "discovery:ExportConfigurations",
"Resource": "*"
}
]
}