fms:GetComplianceDetail

Read

fms:GetComplianceDetail is a Read access-level action in the fms service. Grants permission to retrieve detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy

Resource types

ARNs that fms:GetComplianceDetail can be scoped to in an IAM policy.

arn:${Partition}:fms:${Region}:${Account}:policy/${Id}

policy

Condition keys

Keys you can use in the Condition block of a policy that grants fms:GetComplianceDetail.

aws:ResourceTag/${TagKey} String

Filters access by the tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows fms:GetComplianceDetail. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowFmsGetComplianceDetail",
      "Effect": "Allow",
      "Action": "fms:GetComplianceDetail",
      "Resource": "*"
    }
  ]
}

Related actions in fms

fms:AssociateAdminAccount Write fms:AssociateThirdPartyFirewall Write fms:BatchAssociateResource Write fms:BatchDisassociateResource Write fms:DeleteAppsList Write fms:DeleteNotificationChannel Write fms:DeletePolicy Write fms:DeleteProtocolsList Write fms:DeleteResourceSet Write fms:DisassociateAdminAccount Write fms:DisassociateThirdPartyFirewall Write fms:GetAdminAccount Read

View all fms actions →