fms:GetAdminAccount is a Read access-level action in the fms service. Grants permission to return the AWS Organizations account that is associated with AWS Firewall Manager as the AWS Firewall Manager administrator
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows fms:GetAdminAccount. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowFmsGetAdminAccount",
"Effect": "Allow",
"Action": "fms:GetAdminAccount",
"Resource": "*"
}
]
}