macie2

81 actions in the macie2 service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

macie2:AcceptInvitation

Write

Grants permission to accept an Amazon Macie membership invitation

macie2:BatchGetCustomDataIdentifiers

Read

Grants permission to retrieve information about one or more custom data identifiers

macie2:BatchUpdateAutomatedDiscoveryAccounts

Write

Grants permission to an Amazon Macie administrator to change the status of automated sensitive data discovery for one or more accounts in their organization

macie2:CreateAllowList

Write

Grants permission to create and define the settings for an allow list

macie2:CreateClassificationJob

Write

Grants permission to create and define the settings for a sensitive data discovery job

macie2:CreateCustomDataIdentifier

Write

Grants permission to create and define the settings for a custom data identifier

macie2:CreateFindingsFilter

Write

Grants permission to create and define the settings for a findings filter

macie2:CreateInvitations

Write

Grants permission to send an Amazon Macie membership invitation

macie2:CreateMember

Write

Grants permission to associate an account with an Amazon Macie administrator account

macie2:CreateSampleFindings

Write

Grants permission to create sample findings

macie2:DeclineInvitations

Write

Grants permission to decline Amazon Macie membership invitations

macie2:DeleteAllowList

Write

Grants permission to delete an allow list

macie2:DeleteCustomDataIdentifier

Write

Grants permission to delete a custom data identifier

macie2:DeleteFindingsFilter

Write

Grants permission to delete a findings filter

macie2:DeleteInvitations

Write

Grants permission to delete Amazon Macie membership invitations

macie2:DeleteMember

Write

Grants permission to delete the association between an Amazon Macie administrator account and an account

macie2:DescribeBuckets

Read

Grants permission to retrieve statistical data and other information about S3 buckets that Amazon Macie monitors and analyzes

macie2:DescribeClassificationJob

Read

Grants permission to retrieve information about the status and settings for a sensitive data discovery job

macie2:DescribeOrganizationConfiguration

Read

Grants permission to retrieve information about the Amazon Macie configuration settings for an AWS organization

macie2:DisableMacie

Write

Grants permission to disable an Amazon Macie account, which also deletes Macie resources for the account

macie2:DisableOrganizationAdminAccount

Write

Grants permission to disable an account as the delegated Amazon Macie administrator account for an AWS organization

macie2:DisassociateFromAdministratorAccount

Write

Grants permission to an Amazon Macie member account to disassociate from its Macie administrator account

macie2:DisassociateFromMasterAccount

Write

Grants permission to an Amazon Macie member account to disassociate from its Macie administrator account

macie2:DisassociateMember

Write

Grants permission to an Amazon Macie administrator account to disassociate from a Macie member account

macie2:EnableMacie

Write

Grants permission to enable and specify the configuration settings for a new Amazon Macie account

macie2:EnableOrganizationAdminAccount

Write

Grants permission to enable an account as the delegated Amazon Macie administrator account for an AWS organization

macie2:GetAdministratorAccount

Read

Grants permission to retrieve information about the Amazon Macie administrator account for an account

macie2:GetAllowList

Read

Grants permission to retrieve the settings and status of an allow list

macie2:GetAutomatedDiscoveryConfiguration

Read

Grants permission to retrieve the configuration settings and status of automated sensitive data discovery for an Amazon Macie administrator account, organization, or standalone account

macie2:GetBucketStatistics

Read

Grants permission to retrieve aggregated statistical data for all the S3 buckets that Amazon Macie monitors and analyzes

macie2:GetClassificationExportConfiguration

Read

Grants permission to retrieve the settings for exporting sensitive data discovery results

macie2:GetClassificationScope

Read

Grants permission to retrieve the classification scope settings for an account

macie2:GetCustomDataIdentifier

Read

Grants permission to retrieve information about the settings for a custom data identifier

macie2:GetFindings

Read

Grants permission to retrieve the details of one or more findings

macie2:GetFindingsFilter

Read

Grants permission to retrieve information about the settings for a findings filter

macie2:GetFindingsPublicationConfiguration

Read

Grants permission to retrieve the configuration settings for publishing findings to AWS Security Hub

macie2:GetFindingStatistics

Read

Grants permission to retrieve aggregated statistical data about findings

macie2:GetInvitationsCount

Read

Grants permission to retrieve the count of Amazon Macie membership invitations that were received by an account

macie2:GetMacieSession

Read

Grants permission to retrieve information about the status and configuration settings for an Amazon Macie account

macie2:GetMasterAccount

Read

Grants permission to retrieve information about the Amazon Macie administrator account for an account

macie2:GetMember

Read

Grants permission to retrieve information about an account that's associated with an Amazon Macie administrator account

macie2:GetResourceProfile

Read

Grants permission to retrieve sensitive data discovery statistics and the sensitivity score for an S3 bucket

macie2:GetRevealConfiguration

Read

Grants permission to retrieve the status and configuration settings for retrieving occurrences of sensitive data reported by findings

macie2:GetSensitiveDataOccurrences

Read

Grants permission to retrieve occurrences of sensitive data reported by a finding

macie2:GetSensitiveDataOccurrencesAvailability

Read

Grants permission to check whether occurrences of sensitive data can be retrieved for a finding

macie2:GetSensitivityInspectionTemplate

Read

Grants permission to retrieve the sensitivity inspection template settings for an account

macie2:GetUsageStatistics

Read

Grants permission to retrieve quotas and aggregated usage data for one or more accounts

macie2:GetUsageTotals

Read

Grants permission to retrieve aggregated usage data for an account

macie2:ListAllowLists

List

Grants permission to retrieve a subset of information about all the allow lists for an account

macie2:ListAutomatedDiscoveryAccounts

List

Grants permission to retrieve the status of automated sensitive data discovery for an account

macie2:ListClassificationJobs

List

Grants permission to retrieve a subset of information about the status and settings for one or more sensitive data discovery jobs

macie2:ListClassificationScopes

List

Grants permission to retrieve a subset of information about the classification scope for an account

macie2:ListCustomDataIdentifiers

List

Grants permission to retrieve information about all custom data identifiers

macie2:ListFindings

List

Grants permission to retrieve a subset of information about one or more findings

macie2:ListFindingsFilters

List

Grants permission to retrieve information about all findings filters

macie2:ListInvitations

List

Grants permission to retrieve information about all the Amazon Macie membership invitations that were received by an account

macie2:ListManagedDataIdentifiers

List

Grants permission to retrieve information about managed data identifiers

macie2:ListMembers

List

Grants permission to retrieve information about the Amazon Macie member accounts that are associated with a Macie administrator account

macie2:ListOrganizationAdminAccounts

List

Grants permission to retrieve information about the delegated Amazon Macie administrator account for an AWS organization

macie2:ListResourceProfileArtifacts

List

Grants permission to retrieve information about objects that Amazon Macie selected from an S3 bucket for automated sensitive data discovery

macie2:ListResourceProfileDetections

List

Grants permission to retrieve information about the types and amount of sensitive data that Amazon Macie found in an S3 bucket

macie2:ListSensitivityInspectionTemplates

List

Grants permission to retrieve a subset of information about the sensitivity inspection template for an account

macie2:ListTagsForResource

Read

Grants permission to retrieve the tags for an Amazon Macie resource

macie2:PutClassificationExportConfiguration

Write

Grants permission to create or update the settings for storing sensitive data discovery results

macie2:PutFindingsPublicationConfiguration

Write

Grants permission to update the configuration settings for publishing findings to AWS Security Hub

macie2:SearchResources

Read

Grants permission to retrieve statistical data and other information about AWS resources that Amazon Macie monitors and analyzes

macie2:TagResource

Tagging

Grants permission to add or update the tags for an Amazon Macie resource

macie2:TestCustomDataIdentifier

Write

Grants permission to test a custom data identifier

macie2:UntagResource

Tagging

Grants permission to remove tags from an Amazon Macie resource

macie2:UpdateAllowList

Write

Grants permission to update the settings for an allow list

macie2:UpdateAutomatedDiscoveryConfiguration

Write

Grants permission to change the status of automated sensitive data discovery for an Amazon Macie administrator account, organization, or standalone account

macie2:UpdateClassificationJob

Write

Grants permission to change the status of a sensitive data discovery job

macie2:UpdateClassificationScope

Write

Grants permission to update the classification scope settings for an account

macie2:UpdateFindingsFilter

Write

Grants permission to update the settings for a findings filter

macie2:UpdateMacieSession

Write

Grants permission to an Amazon Macie administrator account to suspend or re-enable Macie for a member account

macie2:UpdateMemberSession

Write

Grants permission to an Amazon Macie administrator account to suspend or re-enable a Macie member account

macie2:UpdateOrganizationConfiguration

Write

Grants permission to update Amazon Macie configuration settings for an AWS organization

macie2:UpdateResourceProfile

Write

Grants permission to update the sensitivity score for an S3 bucket

macie2:UpdateResourceProfileDetections

Write

Grants permission to update the sensitivity scoring settings for an S3 bucket

macie2:UpdateRevealConfiguration

Write

Grants permission to update the status and configuration settings for retrieving occurrences of sensitive data reported by findings

macie2:UpdateSensitivityInspectionTemplate

Write

Grants permission to update the sensitivity inspection template settings for an account