shield:EnableProactiveEngagement is a Write access-level action in the shield service. Grants permission to authorize the DDoS Response Team (DRT) to use email and phone to notify contacts about escalations
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows shield:EnableProactiveEngagement. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowShieldEnableProactiveEngagement",
"Effect": "Allow",
"Action": "shield:EnableProactiveEngagement",
"Resource": "*"
}
]
}