Firewall Manager
Prefix fms, 42 actions · Domain Security, Identity & Compliance
2 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (2)
- AWSFMAdminFullAccessAdmin
- AWSFMAdminReadOnlyAccessReader
Also grants Firewall Manager actions (17)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSFMMemberReadOnlyAccess
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- WellArchitectedAgentResourceScanning
associateadminaccount associatethirdpartyfirewall batchassociateresource batchdisassociateresource deleteappslist deletenotificationchannel deletepolicy deleteprotocolslist deleteresourceset disassociateadminaccount disassociatethirdpartyfirewall getadminaccount getadminscope getappslist getcompliancedetail getnotificationchannel getpolicy getprotectionstatus getprotocolslist getresourceset getthirdpartyfirewallassociationstatus getviolationdetails listadminaccountsfororganization listadminsmanagingaccount listappslists listcompliancestatus listdiscoveredresources listmemberaccounts listpolicies listprotocolslists listresourcesetresources listresourcesets listtagsforresource listthirdpartyfirewallfirewallpolicies putadminaccount putappslist putnotificationchannel putpolicy putprotocolslist putresourceset tagresource untagresource
Actions (42)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| fms:AssociateAdminAccount | Write | 5 | 1 |
| fms:AssociateThirdPartyFirewall | Write | 5 | 1 |
| fms:BatchAssociateResource | Write | 5 | 1 |
| fms:BatchDisassociateResource | Write | 5 | 1 |
| fms:DeleteAppsList | Write | 5 | 1 |
| fms:DeleteNotificationChannel | Write | 5 | 1 |
| fms:DeletePolicy | Write | 5 | 1 |
| fms:DeleteProtocolsList | Write | 5 | 1 |
| fms:DeleteResourceSet | Write | 5 | 1 |
| fms:DisassociateAdminAccount | Write | 5 | 1 |
| fms:DisassociateThirdPartyFirewall | Write | 5 | 1 |
| fms:GetAdminAccount | Read | 10 | 1 |
| fms:GetAdminScope | Read | 9 | 1 |
| fms:GetAppsList | Read | 10 | 1 |
| fms:GetComplianceDetail | Read | 9 | 1 |
| fms:GetNotificationChannel | Read | 14 | 2 |
| fms:GetPolicy | Read | 14 | 2 |
| fms:GetProtectionStatus | Read | 9 | 1 |
| fms:GetProtocolsList | Read | 10 | 1 |
| fms:GetResourceSet | Read | 9 | 2 |
| fms:GetThirdPartyFirewallAssociationStatus | Read | 8 | 1 |
| fms:GetViolationDetails | Read | 9 | 1 |
| fms:ListAdminAccountsForOrganization | List | 10 | 1 |
| fms:ListAdminsManagingAccount | List | 10 | 1 |
| fms:ListAppsLists | List | 12 | 1 |
| fms:ListComplianceStatus | List | 12 | 1 |
| fms:ListDiscoveredResources | List | 10 | 1 |
| fms:ListMemberAccounts | List | 11 | 1 |
| fms:ListPolicies | List | 15 | 2 |
| fms:ListProtocolsLists | List | 12 | 1 |
| fms:ListResourceSetResources | List | 11 | 2 |
| fms:ListResourceSets | List | 11 | 2 |
| fms:ListTagsForResource | Read | 13 | 2 |
| fms:ListThirdPartyFirewallFirewallPolicies | List | 10 | 1 |
| fms:PutAdminAccount | Write | 5 | 1 |
| fms:PutAppsList | Write | 5 | 1 |
| fms:PutNotificationChannel | Write | 5 | 1 |
| fms:PutPolicy | Write | 5 | 1 |
| fms:PutProtocolsList | Write | 5 | 1 |
| fms:PutResourceSet | Write | 5 | 1 |
| fms:TagResource | Tagging | 6 | 1 |
| fms:UntagResource | Tagging | 6 | 1 |