securityhub:BatchUpdateAutomationRules

Write

securityhub:BatchUpdateAutomationRules is a Write access-level action in the securityhub service. Grants permission to update one or more automation rules from Security Hub based on rule Amazon Resource Names (ARNs) and input parameters

Resource types

ARNs that securityhub:BatchUpdateAutomationRules can be scoped to in an IAM policy.

arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}
automation-rule

Condition keys

Keys you can use in the Condition block of a policy that grants securityhub:BatchUpdateAutomationRules.

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows securityhub:BatchUpdateAutomationRules. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSecurityhubBatchUpdateAutomationRules",
      "Effect": "Allow",
      "Action": "securityhub:BatchUpdateAutomationRules",
      "Resource": "*"
    }
  ]
}

Related actions in securityhub

securityhub:AcceptAdministratorInvitation Write securityhub:AcceptInvitation Write securityhub:AllowVendedLogDeliveryForResource Permissions management securityhub:BatchDeleteAutomationRules Write securityhub:BatchDisableStandards Write securityhub:BatchEnableStandards Write securityhub:BatchGetAutomationRules Read securityhub:BatchGetConfigurationPolicyAssociations Read securityhub:BatchGetControlEvaluations Read securityhub:BatchGetSecurityControls Read securityhub:BatchGetStandardsControlAssociations Read securityhub:BatchImportFindings Write

View all securityhub actions →