inspector2

81 actions in the inspector2 service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

inspector2:AssociateMember

Write

Grants permission to associate an account with an Amazon Inspector administrator account

inspector2:BatchAssociateCodeSecurityScanConfiguration

Write

Grants permission to associate multiple code repositories with an Amazon Inspector code security scan configuration

inspector2:BatchDisassociateCodeSecurityScanConfiguration

Write

Grants permission to disassociate multiple code repositories from an Amazon Inspector code security scan configuration

inspector2:BatchGetAccountStatus

Read

Grants permission to retrieve information about Amazon Inspector accounts for an account

inspector2:BatchGetCodeSnippet

Read

Grants permission to retrieve code snippet information about one or more code vulnerability findings

inspector2:BatchGetFindingDetails

Read

Grants permission to let a customer get enhanced vulnerability intelligence details for findings

inspector2:BatchGetFreeTrialInfo

Read

Grants permission to retrieve free trial period eligibility about Amazon Inspector accounts for an account

inspector2:BatchGetMemberEc2DeepInspectionStatus

Read

Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts

inspector2:BatchUpdateMemberEc2DeepInspectionStatus

Write

Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts

inspector2:CancelFindingsReport

Write

Grants permission to cancel the generation of a findings report

inspector2:CancelSbomExport

Write

Grants permission to cancel the generation of an SBOM report

inspector2:CreateCisScanConfiguration

Write

Grants permission to create and define the settings for a CIS scan configuration

inspector2:CreateCodeSecurityIntegration

Write

Grants permission to create a code security integration with a source code repository provider

inspector2:CreateCodeSecurityScanConfiguration

Write

Grants permission to create a scan configuration for code security scanning

inspector2:CreateConnector

Write

Grants permission to create a connector to scan resources from a third-party cloud provider

inspector2:CreateFilter

Write

Grants permission to create and define the settings for a findings filter

inspector2:CreateFindingsReport

Write

Grants permission to request the generation of a findings report

inspector2:CreateSbomExport

Write

Grants permission to request the generation of an SBOM report

inspector2:DeleteCisScanConfiguration

Write

Grants permission to delete a CIS scan configuration

inspector2:DeleteCodeSecurityIntegration

Write

Grants permission to delete a code security integration

inspector2:DeleteCodeSecurityScanConfiguration

Write

Grants permission to delete a code security scan configuration

inspector2:DeleteConnector

Write

Grants permission to delete a connector configured for scanning resources from a third-party cloud provider

inspector2:DeleteFilter

Write

Grants permission to delete a findings filter

inspector2:DescribeOrganizationConfiguration

Read

Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS organization

inspector2:Disable

Write

Grants permission to disable an Amazon Inspector account

inspector2:DisableDelegatedAdminAccount

Write

Grants permission to disable an account as the delegated Amazon Inspector administrator account for an AWS organization

inspector2:DisassociateMember

Write

Grants permission to an Amazon Inspector administrator account to disassociate from an Inspector member account

inspector2:Enable

Write

Grants permission to enable and specify the configuration settings for a new Amazon Inspector account

inspector2:EnableDelegatedAdminAccount

Write

Grants permission to enable an account as the delegated Amazon Inspector administrator account for an AWS organization

inspector2:GetCisScanReport

Read

Grants permission to retrieve a report containing information about completed CIS scans

inspector2:GetCisScanResultDetails

List

Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource

inspector2:GetClustersForImage

Read

Grants permission to get cluster information for a given a continuously scanned amazon Ecr image

inspector2:GetCodeSecurityIntegration

Read

Grants permission to retrieve information about a code security integration

inspector2:GetCodeSecurityScan

Read

Grants permission to retrieve information about a specific code security scan

inspector2:GetCodeSecurityScanConfiguration

Read

Grants permission to retrieve information about a code security scan configuration

inspector2:GetConfiguration

Read

Grants permission to retrieve information about the Amazon Inspector configuration settings for an AWS account

inspector2:GetDelegatedAdminAccount

Read

Grants permission to retrieve information about the Amazon Inspector administrator account for an account

inspector2:GetEc2DeepInspectionConfiguration

Read

Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and member account

inspector2:GetEncryptionKey

Read

Grants permission to retrieve information about the KMS key used to encrypt code snippets with

inspector2:GetFindingsReportStatus

Read

Grants permission to retrieve status for a requested findings report

inspector2:GetMember

Read

Grants permission to retrieve information about an account that's associated with an Amazon Inspector administrator account

inspector2:GetSbomExport

Read

Grants permission to retrieve a requested SBOM report

inspector2:ListAccountPermissions

List

Grants permission to retrieve feature configuration permissions associated with an Amazon Inspector account within an organization

inspector2:ListCisScanConfigurations

List

Grants permission to retrieve information about all CIS scan configurations

inspector2:ListCisScanResultsAggregatedByChecks

List

Grants permission to retrieve information about all checks pertaining to one CIS scan

inspector2:ListCisScanResultsAggregatedByTargetResource

List

Grants permission to retrieve information about all resources pertaining to one CIS scan

inspector2:ListCisScans

List

Grants permission to retrieve information about completed CIS scans

inspector2:ListCodeSecurityIntegrations

List

Grants permission to list all code security integrations in your account

inspector2:ListCodeSecurityScanConfigurationAssociations

List

Grants permission to list the associations between code repositories and Amazon Inspector code security scan configurations

inspector2:ListCodeSecurityScanConfigurations

List

Grants permission to list all code security scan configurations in your account

inspector2:ListConnectors

List

Grants permission to list connectors configured for scanning resources from third-party cloud providers

inspector2:ListConnectorScanConfigurations

List

Grants permission to list scan configurations for connectors

inspector2:ListCoverage

List

Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors

inspector2:ListCoverageStatistics

List

Grants permission to retrieve statistical data and other information about the resources Amazon Inspector monitors

inspector2:ListDelegatedAdminAccounts

List

Grants permission to retrieve information about the delegated Amazon Inspector administrator account for an AWS organization

inspector2:ListFilters

List

Grants permission to retrieve information about all findings filters

inspector2:ListFindingAggregations

List

Grants permission to retrieve statistical data and other information about Amazon Inspector findings

inspector2:ListFindings

List

Grants permission to retrieve a subset of information about one or more findings

inspector2:ListMembers

List

Grants permission to retrieve information about the Amazon Inspector member accounts that are associated with an Inspector administrator account

inspector2:ListTagsForResource

Read

Grants permission to retrieve the tags for an Amazon Inspector resource

inspector2:ListUsageTotals

List

Grants permission to retrieve aggregated usage data for an account

inspector2:ResetEncryptionKey

Write

Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with

inspector2:SearchVulnerabilities

Read

Grants permission to list Amazon Inspector coverage details for a specific vulnerability

inspector2:SendCisSessionHealth

Write

Grants permission to send CIS health for a CIS scan

inspector2:SendCisSessionTelemetry

Write

Grants permission to send CIS telemetry for a CIS scan

inspector2:StartCisSession

Write

Grants permission to start a CIS scan session

inspector2:StartCodeSecurityScan

Write

Grants permission to initiate a code security scan on a specified repository

inspector2:StopCisSession

Write

Grants permission to stop a CIS scan session

inspector2:TagResource

Tagging

Grants permission to add or update the tags for an Amazon Inspector resource

inspector2:UntagResource

Tagging

Grants permission to remove tags from an Amazon Inspector resource

inspector2:UpdateCisScanConfiguration

Write

Grants permission to update the settings for a CIS scan configuration

inspector2:UpdateCodeSecurityIntegration

Write

Grants permission to update an existing code security integration

inspector2:UpdateCodeSecurityScanConfiguration

Write

Grants permission to update an existing code security scan configuration

inspector2:UpdateConfiguration

Write

Grants permission to update information about the Amazon Inspector configuration settings for an AWS account

inspector2:UpdateConnector

Write

Grants permission to update a connector configured for scanning resources from a third-party cloud provider

inspector2:UpdateConnectorScanConfiguration

Write

Grants permission to update scan configuration settings for resources associated with a connector

inspector2:UpdateEc2DeepInspectionConfiguration

Write

Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account

inspector2:UpdateEncryptionKey

Write

Grants permission to let a customer use a KMS key to encrypt code snippets with

inspector2:UpdateFilter

Write

Grants permission to update the settings for a findings filter

inspector2:UpdateOrganizationConfiguration

Write

Grants permission to update Amazon Inspector configuration settings for an AWS organization

inspector2:UpdateOrgEc2DeepInspectionConfiguration

Write

Grants permission to update ec2 deep inspection configuration by delegated administrator for its associated member accounts