91 actions in the guardduty service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to accept invitations to become a GuardDuty member account
Grants permission to accept invitations to become a GuardDuty member account
Grants permission to archive GuardDuty findings
Grants permission to create a detector
Grants permission to create GuardDuty filters. A filters defines finding attributes and conditions used to filter findings
Grants permission to create a GuardDuty investigation
Grants permission to create an IPSet
Grants permission to create a new Malware Protection plan
Grants permission to create GuardDuty member accounts, where the account used to create a member becomes the GuardDuty administrator account
Grants permission to create a publishing destination
Grants permission to create sample findings
Grants permission to create GuardDuty ThreatEntitySets, where a ThreatEntitySet consists of known malicious IP addresses and/or domains used by GuardDuty to generate findings
Grants permission to create GuardDuty ThreatIntelSets, where a ThreatIntelSet consists of known malicious IP addresses used by GuardDuty to generate findings
Grants permission to create a TrustedEntitySet
Grants permission to decline invitations to become a GuardDuty member account
Grants permission to delete GuardDuty detectors
Grants permission to delete GuardDuty filters
Grants permission to delete invitations to become a GuardDuty member account
Grants permission to delete GuardDuty IPSets
Grants permission to delete a Malware Protection plan
Grants permission to delete GuardDuty member accounts
Grants permission to delete a publishing destination
Grants permission to delete GuardDuty ThreatEntitySets
Grants permission to delete GuardDuty ThreatIntelSets
Grants permission to delete GuardDuty TrustedEntitySets
Grants permission to retrieve details about malware scans
Grants permission to retrieve details about the delegated administrator associated with a GuardDuty detector
Grants permission to retrieve details about a publishing destination
Grants permission to disable the organization delegated administrator for GuardDuty
Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account
Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account
Grants permission to disassociate GuardDuty member accounts from their administrator GuardDuty account
Grants permission to enable an organization delegated administrator for GuardDuty
Grants permission to retrieve details of the GuardDuty administrator account associated with a member account
Grants permission to list Amazon GuardDuty coverage statistics for the specified GuardDuty account in a Region
Grants permission to retrieve GuardDuty detectors
Grants permission to retrieve GuardDuty filters
Grants permission to retrieve GuardDuty findings
Grants permission to retrieve a list of GuardDuty finding statistics
Grants permission to retrieve a GuardDuty investigation
Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation
Grants permission to retrieve GuardDuty IPSets
Grants permission to retrieve a Malware Protection plan details
Grants permission to retrieve a malware scan's details
Grants permission to retrieve the malware scan settings
Grants permission to retrieve details of the GuardDuty administrator account associated with a member account
Grants permission to describe which data sources are enabled for member accounts detectors
Grants permission to retrieve the member accounts associated with an administrator account
Grants permission to retrieve GuardDuty protection plan coverage statistics for member accounts in a Region
Grants permission to provide the number of days left for each data source used in the free trial period
Grants permission to retrieve GuardDuty ThreatEntitySets
Grants permission to retrieve GuardDuty ThreatIntelSets
Grants permission to retrieve GuardDuty TrustedEntitySets
Grants permission to list Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID
Grants permission to invite other AWS accounts to enable GuardDuty and become GuardDuty member accounts
Grants permission to list all the resource details for a given account in a Region
Grants permission to retrieve a list of GuardDuty detectors
Grants permission to retrieve a list of GuardDuty filters
Grants permission to retrieve a list of GuardDuty findings
Grants permission to retrieve a list of GuardDuty investigations
Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account
Grants permission to retrieve a list of GuardDuty IPSets
Grants permission to retrieve a list of Malware Protection plans
Grants permission to retrieve a list of malware scans
Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account
Grants permission to list details about the organization delegated administrator for GuardDuty
Grants permission to retrieve a list of publishing destinations
Grants permission to retrieve a list of tags associated with a GuardDuty resource
Grants permission to retrieve a list of GuardDuty ThreatEntitySets
Grants permission to retrieve a list of GuardDuty ThreatIntelSets
Grants permission to retrieve a list of GuardDuty TrustedEntitySets
Grants permission to initiate a new object malware scan
Grants permission to send security telemetry for a specific GuardDuty account in a Region
Grants permission to initiate a new malware scan
Grants permission to a GuardDuty administrator account to monitor findings from GuardDuty member accounts
Grants permission to disable monitoring findings from member accounts
Grants permission to add tags to a GuardDuty resource
Grants permission to unarchive GuardDuty findings
Grants permission to remove tags from a GuardDuty resource
Grants permission to update GuardDuty detectors
Grants permission to updates GuardDuty filters
Grants permission to update findings feedback to mark GuardDuty findings as useful or not useful
Grants permission to update GuardDuty IPSets
Grants permission to update the Malware Protection plan
Grants permission to update the malware scan settings
Grants permission to update which data sources are enabled for member accounts detectors
Grants permission to update the delegated administrator configuration associated with a GuardDuty detector
Grants permission to update a publishing destination
Grants permission to update GuardDuty ThreatEntitySets
Grants permission to updates the GuardDuty ThreatIntelSets
Grants permission to update GuardDuty TrustedEntitySets