shield:AssociateProactiveEngagementDetails is a Write access-level action in the shield service. Grants permission to initialize proactive engagement and set the list of contacts for the DDoS Response Team (DRT) to use
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows shield:AssociateProactiveEngagementDetails. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowShieldAssociateProactiveEngagementDetails",
"Effect": "Allow",
"Action": "shield:AssociateProactiveEngagementDetails",
"Resource": "*"
}
]
}