inspector:RemoveAttributesFromFindings is a Write access-level action in the inspector service. Grants permission to remove entire attributes (key and value pairs) from the findings that are specified by the ARNs of the findings where an attribute with the specified key exists
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows inspector:RemoveAttributesFromFindings. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowInspectorRemoveAttributesFromFindings",
"Effect": "Allow",
"Action": "inspector:RemoveAttributesFromFindings",
"Resource": "*"
}
]
}