securityhub:UpdateAutomationRuleV2

Write

securityhub:UpdateAutomationRuleV2 is a Write access-level action in the securityhub service. Grants permission to update an automation rule V2 in Security Hub based on rule Amazon Resource Name (ARN) and input parameters

Resource types

ARNs that securityhub:UpdateAutomationRuleV2 can be scoped to in an IAM policy.

arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id}
automation-rulev2

Condition keys

Keys you can use in the Condition block of a policy that grants securityhub:UpdateAutomationRuleV2.

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows securityhub:UpdateAutomationRuleV2. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSecurityhubUpdateAutomationRuleV2",
      "Effect": "Allow",
      "Action": "securityhub:UpdateAutomationRuleV2",
      "Resource": "*"
    }
  ]
}

Related actions in securityhub

securityhub:AcceptAdministratorInvitation Write securityhub:AcceptInvitation Write securityhub:AllowVendedLogDeliveryForResource Permissions management securityhub:BatchDeleteAutomationRules Write securityhub:BatchDisableStandards Write securityhub:BatchEnableStandards Write securityhub:BatchGetAutomationRules Read securityhub:BatchGetConfigurationPolicyAssociations Read securityhub:BatchGetControlEvaluations Read securityhub:BatchGetSecurityControls Read securityhub:BatchGetStandardsControlAssociations Read securityhub:BatchImportFindings Write

View all securityhub actions →