guardduty

91 actions in the guardduty service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

guardduty:AcceptAdministratorInvitation

Write

Grants permission to accept invitations to become a GuardDuty member account

guardduty:AcceptInvitation

Write

Grants permission to accept invitations to become a GuardDuty member account

guardduty:ArchiveFindings

Write

Grants permission to archive GuardDuty findings

guardduty:CreateDetector

Write

Grants permission to create a detector

guardduty:CreateFilter

Write

Grants permission to create GuardDuty filters. A filters defines finding attributes and conditions used to filter findings

guardduty:CreateInvestigation

Write

Grants permission to create a GuardDuty investigation

guardduty:CreateIPSet

Write

Grants permission to create an IPSet

guardduty:CreateMalwareProtectionPlan

Write

Grants permission to create a new Malware Protection plan

guardduty:CreateMembers

Write

Grants permission to create GuardDuty member accounts, where the account used to create a member becomes the GuardDuty administrator account

guardduty:CreatePublishingDestination

Write

Grants permission to create a publishing destination

guardduty:CreateSampleFindings

Write

Grants permission to create sample findings

guardduty:CreateThreatEntitySet

Write

Grants permission to create GuardDuty ThreatEntitySets, where a ThreatEntitySet consists of known malicious IP addresses and/or domains used by GuardDuty to generate findings

guardduty:CreateThreatIntelSet

Write

Grants permission to create GuardDuty ThreatIntelSets, where a ThreatIntelSet consists of known malicious IP addresses used by GuardDuty to generate findings

guardduty:CreateTrustedEntitySet

Write

Grants permission to create a TrustedEntitySet

guardduty:DeclineInvitations

Write

Grants permission to decline invitations to become a GuardDuty member account

guardduty:DeleteDetector

Write

Grants permission to delete GuardDuty detectors

guardduty:DeleteFilter

Write

Grants permission to delete GuardDuty filters

guardduty:DeleteInvitations

Write

Grants permission to delete invitations to become a GuardDuty member account

guardduty:DeleteIPSet

Write

Grants permission to delete GuardDuty IPSets

guardduty:DeleteMalwareProtectionPlan

Write

Grants permission to delete a Malware Protection plan

guardduty:DeleteMembers

Write

Grants permission to delete GuardDuty member accounts

guardduty:DeletePublishingDestination

Write

Grants permission to delete a publishing destination

guardduty:DeleteThreatEntitySet

Write

Grants permission to delete GuardDuty ThreatEntitySets

guardduty:DeleteThreatIntelSet

Write

Grants permission to delete GuardDuty ThreatIntelSets

guardduty:DeleteTrustedEntitySet

Write

Grants permission to delete GuardDuty TrustedEntitySets

guardduty:DescribeMalwareScans

Read

Grants permission to retrieve details about malware scans

guardduty:DescribeOrganizationConfiguration

Read

Grants permission to retrieve details about the delegated administrator associated with a GuardDuty detector

guardduty:DescribePublishingDestination

Read

Grants permission to retrieve details about a publishing destination

guardduty:DisableOrganizationAdminAccount

Write

Grants permission to disable the organization delegated administrator for GuardDuty

guardduty:DisassociateFromAdministratorAccount

Write

Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account

guardduty:DisassociateFromMasterAccount

Write

Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account

guardduty:DisassociateMembers

Write

Grants permission to disassociate GuardDuty member accounts from their administrator GuardDuty account

guardduty:EnableOrganizationAdminAccount

Write

Grants permission to enable an organization delegated administrator for GuardDuty

guardduty:GetAdministratorAccount

Read

Grants permission to retrieve details of the GuardDuty administrator account associated with a member account

guardduty:GetCoverageStatistics

Read

Grants permission to list Amazon GuardDuty coverage statistics for the specified GuardDuty account in a Region

guardduty:GetDetector

Read

Grants permission to retrieve GuardDuty detectors

guardduty:GetFilter

Read

Grants permission to retrieve GuardDuty filters

guardduty:GetFindings

Read

Grants permission to retrieve GuardDuty findings

guardduty:GetFindingsStatistics

Read

Grants permission to retrieve a list of GuardDuty finding statistics

guardduty:GetInvestigation

Read

Grants permission to retrieve a GuardDuty investigation

guardduty:GetInvitationsCount

Read

Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation

guardduty:GetIPSet

Read

Grants permission to retrieve GuardDuty IPSets

guardduty:GetMalwareProtectionPlan

Read

Grants permission to retrieve a Malware Protection plan details

guardduty:GetMalwareScan

Read

Grants permission to retrieve a malware scan's details

guardduty:GetMalwareScanSettings

Read

Grants permission to retrieve the malware scan settings

guardduty:GetMasterAccount

Read

Grants permission to retrieve details of the GuardDuty administrator account associated with a member account

guardduty:GetMemberDetectors

Read

Grants permission to describe which data sources are enabled for member accounts detectors

guardduty:GetMembers

Read

Grants permission to retrieve the member accounts associated with an administrator account

guardduty:GetOrganizationStatistics

Read

Grants permission to retrieve GuardDuty protection plan coverage statistics for member accounts in a Region

guardduty:GetRemainingFreeTrialDays

Read

Grants permission to provide the number of days left for each data source used in the free trial period

guardduty:GetThreatEntitySet

Read

Grants permission to retrieve GuardDuty ThreatEntitySets

guardduty:GetThreatIntelSet

Read

Grants permission to retrieve GuardDuty ThreatIntelSets

guardduty:GetTrustedEntitySet

Read

Grants permission to retrieve GuardDuty TrustedEntitySets

guardduty:GetUsageStatistics

Read

Grants permission to list Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID

guardduty:InviteMembers

Write

Grants permission to invite other AWS accounts to enable GuardDuty and become GuardDuty member accounts

guardduty:ListCoverage

List

Grants permission to list all the resource details for a given account in a Region

guardduty:ListDetectors

List

Grants permission to retrieve a list of GuardDuty detectors

guardduty:ListFilters

List

Grants permission to retrieve a list of GuardDuty filters

guardduty:ListFindings

List

Grants permission to retrieve a list of GuardDuty findings

guardduty:ListInvestigations

List

Grants permission to retrieve a list of GuardDuty investigations

guardduty:ListInvitations

List

Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account

guardduty:ListIPSets

List

Grants permission to retrieve a list of GuardDuty IPSets

guardduty:ListMalwareProtectionPlans

List

Grants permission to retrieve a list of Malware Protection plans

guardduty:ListMalwareScans

List

Grants permission to retrieve a list of malware scans

guardduty:ListMembers

List

Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account

guardduty:ListOrganizationAdminAccounts

List

Grants permission to list details about the organization delegated administrator for GuardDuty

guardduty:ListPublishingDestinations

List

Grants permission to retrieve a list of publishing destinations

guardduty:ListTagsForResource

Read

Grants permission to retrieve a list of tags associated with a GuardDuty resource

guardduty:ListThreatEntitySets

List

Grants permission to retrieve a list of GuardDuty ThreatEntitySets

guardduty:ListThreatIntelSets

List

Grants permission to retrieve a list of GuardDuty ThreatIntelSets

guardduty:ListTrustedEntitySets

List

Grants permission to retrieve a list of GuardDuty TrustedEntitySets

guardduty:SendObjectMalwareScan

Write

Grants permission to initiate a new object malware scan

guardduty:SendSecurityTelemetry

Write

Grants permission to send security telemetry for a specific GuardDuty account in a Region

guardduty:StartMalwareScan

Write

Grants permission to initiate a new malware scan

guardduty:StartMonitoringMembers

Write

Grants permission to a GuardDuty administrator account to monitor findings from GuardDuty member accounts

guardduty:StopMonitoringMembers

Write

Grants permission to disable monitoring findings from member accounts

guardduty:TagResource

Tagging

Grants permission to add tags to a GuardDuty resource

guardduty:UnarchiveFindings

Write

Grants permission to unarchive GuardDuty findings

guardduty:UntagResource

Tagging

Grants permission to remove tags from a GuardDuty resource

guardduty:UpdateDetector

Write

Grants permission to update GuardDuty detectors

guardduty:UpdateFilter

Write

Grants permission to updates GuardDuty filters

guardduty:UpdateFindingsFeedback

Write

Grants permission to update findings feedback to mark GuardDuty findings as useful or not useful

guardduty:UpdateIPSet

Write

Grants permission to update GuardDuty IPSets

guardduty:UpdateMalwareProtectionPlan

Write

Grants permission to update the Malware Protection plan

guardduty:UpdateMalwareScanSettings

Write

Grants permission to update the malware scan settings

guardduty:UpdateMemberDetectors

Write

Grants permission to update which data sources are enabled for member accounts detectors

guardduty:UpdateOrganizationConfiguration

Write

Grants permission to update the delegated administrator configuration associated with a GuardDuty detector

guardduty:UpdatePublishingDestination

Write

Grants permission to update a publishing destination

guardduty:UpdateThreatEntitySet

Write

Grants permission to update GuardDuty ThreatEntitySets

guardduty:UpdateThreatIntelSet

Write

Grants permission to updates the GuardDuty ThreatIntelSets

guardduty:UpdateTrustedEntitySet

Write

Grants permission to update GuardDuty TrustedEntitySets