securitylake:GetDataLakeExceptionSubscription is a Read access-level action in the securitylake service. Grants permission to query the protocol and endpoint that were provided when subscribing to SNS topics for exception notifications
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows securitylake:GetDataLakeExceptionSubscription. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSecuritylakeGetDataLakeExceptionSubscription",
"Effect": "Allow",
"Action": "securitylake:GetDataLakeExceptionSubscription",
"Resource": "*"
}
]
}