discovery:StartBatchDeleteConfigurationTask is a Write access-level action in the discovery service. Grants permission to StartBatchDeleteConfigurationTask API. StartBatchDeleteConfigurationTask starts an asynchronous batch deletion of your configuration items. All of the supplied IDs must be for the same asset type (server, application, process, or connection). Output is a unique task ID you can use to check back on the deletions progress
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows discovery:StartBatchDeleteConfigurationTask. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowDiscoveryStartBatchDeleteConfigurationTask",
"Effect": "Allow",
"Action": "discovery:StartBatchDeleteConfigurationTask",
"Resource": "*"
}
]
}