securityhub:GetAutomationRuleV2

Read

securityhub:GetAutomationRuleV2 is a Read access-level action in the securityhub service. Grants permission to retrieve details for an automation rule V2 from Security Hub based on rule Amazon Resource Name (ARN)

Resource types

ARNs that securityhub:GetAutomationRuleV2 can be scoped to in an IAM policy.

arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id}
automation-rulev2

Condition keys

Keys you can use in the Condition block of a policy that grants securityhub:GetAutomationRuleV2.

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows securityhub:GetAutomationRuleV2. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSecurityhubGetAutomationRuleV2",
      "Effect": "Allow",
      "Action": "securityhub:GetAutomationRuleV2",
      "Resource": "*"
    }
  ]
}

Related actions in securityhub

securityhub:AcceptAdministratorInvitation Write securityhub:AcceptInvitation Write securityhub:AllowVendedLogDeliveryForResource Permissions management securityhub:BatchDeleteAutomationRules Write securityhub:BatchDisableStandards Write securityhub:BatchEnableStandards Write securityhub:BatchGetAutomationRules Read securityhub:BatchGetConfigurationPolicyAssociations Read securityhub:BatchGetControlEvaluations Read securityhub:BatchGetSecurityControls Read securityhub:BatchGetStandardsControlAssociations Read securityhub:BatchImportFindings Write

View all securityhub actions →