macie2:BatchUpdateAutomatedDiscoveryAccounts is a Write access-level action in the macie2 service. Grants permission to an Amazon Macie administrator to change the status of automated sensitive data discovery for one or more accounts in their organization
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows macie2:BatchUpdateAutomatedDiscoveryAccounts. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowMacie2BatchUpdateAutomatedDiscoveryAccounts",
"Effect": "Allow",
"Action": "macie2:BatchUpdateAutomatedDiscoveryAccounts",
"Resource": "*"
}
]
}