fms:GetNotificationChannel is a Read access-level action in the fms service. Grants permission to retrieve information about the Amazon Simple Notification Service (SNS) topic that is used to record AWS Firewall Manager SNS logs
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows fms:GetNotificationChannel. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowFmsGetNotificationChannel",
"Effect": "Allow",
"Action": "fms:GetNotificationChannel",
"Resource": "*"
}
]
}