fms:PutNotificationChannel is a Write access-level action in the fms service. Grants permission to designate the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager (FM) could use to notify the FM administrator about major FM events and errors across the organization
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows fms:PutNotificationChannel. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowFmsPutNotificationChannel",
"Effect": "Allow",
"Action": "fms:PutNotificationChannel",
"Resource": "*"
}
]
}