81 actions in the inspector2 service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to associate an account with an Amazon Inspector administrator account
Grants permission to associate multiple code repositories with an Amazon Inspector code security scan configuration
Grants permission to disassociate multiple code repositories from an Amazon Inspector code security scan configuration
Grants permission to retrieve information about Amazon Inspector accounts for an account
Grants permission to retrieve code snippet information about one or more code vulnerability findings
Grants permission to let a customer get enhanced vulnerability intelligence details for findings
Grants permission to retrieve free trial period eligibility about Amazon Inspector accounts for an account
Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts
Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts
Grants permission to cancel the generation of a findings report
Grants permission to cancel the generation of an SBOM report
Grants permission to create and define the settings for a CIS scan configuration
Grants permission to create a code security integration with a source code repository provider
Grants permission to create a scan configuration for code security scanning
Grants permission to create a connector to scan resources from a third-party cloud provider
Grants permission to create and define the settings for a findings filter
Grants permission to request the generation of a findings report
Grants permission to request the generation of an SBOM report
Grants permission to delete a CIS scan configuration
Grants permission to delete a code security integration
Grants permission to delete a code security scan configuration
Grants permission to delete a connector configured for scanning resources from a third-party cloud provider
Grants permission to delete a findings filter
Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS organization
Grants permission to disable an Amazon Inspector account
Grants permission to disable an account as the delegated Amazon Inspector administrator account for an AWS organization
Grants permission to an Amazon Inspector administrator account to disassociate from an Inspector member account
Grants permission to enable and specify the configuration settings for a new Amazon Inspector account
Grants permission to enable an account as the delegated Amazon Inspector administrator account for an AWS organization
Grants permission to retrieve a report containing information about completed CIS scans
Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource
Grants permission to get cluster information for a given a continuously scanned amazon Ecr image
Grants permission to retrieve information about a code security integration
Grants permission to retrieve information about a specific code security scan
Grants permission to retrieve information about a code security scan configuration
Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS account
Grants permission to retrieve information about the Amazon Inspector administrator account for an account
Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and member account
Grants permission to retrieve information about the KMS key used to encrypt code snippets with
Grants permission to retrieve status for a requested findings report
Grants permission to retrieve information about an account that's associated with an Amazon Inspector administrator account
Grants permission to retrieve a requested SBOM report
Grants permission to retrieve feature configuration permissions associated with an Amazon Inspector account within an organization
Grants permission to retrieve information about all CIS scan configurations
Grants permission to retrieve information about all checks pertaining to one CIS scan
Grants permission to retrieve information about all resources pertaining to one CIS scan
Grants permission to retrieve information about completed CIS scans
Grants permission to list all code security integrations in your account
Grants permission to list the associations between code repositories and Amazon Inspector code security scan configurations
Grants permission to list all code security scan configurations in your account
Grants permission to list connectors configured for scanning resources from third-party cloud providers
Grants permission to list scan configurations for connectors
Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors
Grants permission to retrieve statistical data and other information about the resources Amazon Inspector monitors
Grants permission to retrieve information about the delegated Amazon Inspector administrator account for an AWS organization
Grants permission to retrieve information about all findings filters
Grants permission to retrieve statistical data and other information about Amazon Inspector findings
Grants permission to retrieve a subset of information about one or more findings
Grants permission to retrieve information about the Amazon Inspector member accounts that are associated with an Inspector administrator account
Grants permission to retrieve the tags for an Amazon Inspector resource
Grants permission to retrieve aggregated usage data for an account
Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with
Grants permission to list Amazon Inspector coverage details for a specific vulnerability
Grants permission to send CIS health for a CIS scan
Grants permission to send CIS telemetry for a CIS scan
Grants permission to start a CIS scan session
Grants permission to initiate a code security scan on a specified repository
Grants permission to stop a CIS scan session
Grants permission to add or update the tags for an Amazon Inspector resource
Grants permission to remove tags from an Amazon Inspector resource
Grants permission to update the settings for a CIS scan configuration
Grants permission to update an existing code security integration
Grants permission to update an existing code security scan configuration
Grants permission to update information about the Amazon Inspector configuration settings for an AWS account
Grants permission to update a connector configured for scanning resources from a third-party cloud provider
Grants permission to update scan configuration settings for resources associated with a connector
Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account
Grants permission to let a customer use a KMS key to encrypt code snippets with
Grants permission to update the settings for a findings filter
Grants permission to update Amazon Inspector configuration settings for an AWS organization
Grants permission to update ec2 deep inspection configuration by delegated administrator for its associated member accounts