GuardDuty

Prefix guardduty, 104 actions · Domain Security, Identity & Compliance

6 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.

User access (3)

Operator and limited (2)

AmazonDetectiveInvestigatorAccessOperator
AWSBackupServiceRolePolicyForScansOperator

Service-linked roles (1)

AWSSecurityIncidentResponseTriageServiceRolePolicyOperator

Also grants GuardDuty actions (24)

acceptadministratorinvitation acceptinvitation archivefindings createcustomdetectionruleassociation createcustomdetectionruleorgconfiguration createdetector createfilter createipset createinvestigation createmalwareprotectionplan createmembers createpublishingdestination createsamplefindings createthreatentityset createthreatintelset createtrustedentityset declineinvitations deletecustomdetectionruleassociation deletecustomdetectionruleorgconfiguration deletedetector deletefilter deleteipset deleteinvitations deletemalwareprotectionplan deletemembers deletepublishingdestination deletethreatentityset deletethreatintelset deletetrustedentityset describemalwarescans describeorganizationconfiguration describepublishingdestination disableorganizationadminaccount disassociatefromadministratoraccount disassociatefrommasteraccount disassociatemembers enableorganizationadminaccount getadministratoraccount getcoveragestatistics getcustomdetectionrule getcustomdetectionruleassociation getcustomdetectionruleorgconfiguration getdetector getfilter getfindings getfindingsstatistics getipset getinvestigation getinvitationscount getmalwareprotectionplan getmalwarescan getmalwarescansettings getmasteraccount getmemberdetectors getmembers getorganizationstatistics getremainingfreetrialdays getthreatentityset getthreatintelset gettrustedentityset getusagestatistics invitemembers listcoverage listcustomdetectionruleassociations listcustomdetectionruleorgconfigurations listcustomdetectionrules listdetectors listfilters listfindings listipsets listinvestigationrecords listinvestigations listinvitations listmalwareprotectionplans listmalwarescans listmembers listorganizationadminaccounts listpublishingdestinations listtagsforresource listthreatentitysets listthreatintelsets listtrustedentitysets sendobjectmalwarescan sendsecuritytelemetry startmalwarescan startmonitoringmembers stopmonitoringmembers tagresource unarchivefindings untagresource updatecustomdetectionruleassociation updatecustomdetectionruleorgconfiguration updatedetector updatefilter updatefindingsfeedback updateipset updatemalwareprotectionplan updatemalwarescansettings updatememberdetectors updateorganizationconfiguration updatepublishingdestination updatethreatentityset updatethreatintelset updatetrustedentityset

Actions (104)

GuardDuty actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
guardduty:AcceptAdministratorInvitation	Write	6	1
guardduty:AcceptInvitation	Write	6	1
guardduty:ArchiveFindings	Write	8	2
guardduty:CreateCustomDetectionRuleAssociation	Write	6	1
guardduty:CreateCustomDetectionRuleOrgConfiguration	Write	6	1
guardduty:CreateDetector	Write	7	1
guardduty:CreateFilter	Write	7	1
guardduty:CreateIPSet	Write	6	1
guardduty:CreateInvestigation	Write	6	1
guardduty:CreateMalwareProtectionPlan	Write	6	1
guardduty:CreateMembers	Write	7	1
guardduty:CreatePublishingDestination	Write	6	1
guardduty:CreateSampleFindings	Write	6	1
guardduty:CreateThreatEntitySet	Write	6	1
guardduty:CreateThreatIntelSet	Write	6	1
guardduty:CreateTrustedEntitySet	Write	6	1
guardduty:DeclineInvitations	Write	6	1
guardduty:DeleteCustomDetectionRuleAssociation	Write	6	1
guardduty:DeleteCustomDetectionRuleOrgConfiguration	Write	6	1
guardduty:DeleteDetector	Write	7	1
guardduty:DeleteFilter	Write	6	1
guardduty:DeleteIPSet	Write	6	1
guardduty:DeleteInvitations	Write	6	1
guardduty:DeleteMalwareProtectionPlan	Write	6	1
guardduty:DeleteMembers	Write	6	1
guardduty:DeletePublishingDestination	Write	6	1
guardduty:DeleteThreatEntitySet	Write	6	1
guardduty:DeleteThreatIntelSet	Write	6	1
guardduty:DeleteTrustedEntitySet	Write	6	1
guardduty:DescribeMalwareScans	Read	11	1
guardduty:DescribeOrganizationConfiguration	Read	11	2
guardduty:DescribePublishingDestination	Read	14	2
guardduty:DisableOrganizationAdminAccount	Write	6	1
guardduty:DisassociateFromAdministratorAccount	Write	6	1
guardduty:DisassociateFromMasterAccount	Write	6	1
guardduty:DisassociateMembers	Write	6	1
guardduty:EnableOrganizationAdminAccount	Write	7	1
guardduty:GetAdministratorAccount	Read	14	2
guardduty:GetCoverageStatistics	Read	11	1
guardduty:GetCustomDetectionRule	Read	10	1
guardduty:GetCustomDetectionRuleAssociation	Read	10	1
guardduty:GetCustomDetectionRuleOrgConfiguration	Read	10	1
guardduty:GetDetector	Read	19	3
guardduty:GetFilter	Read	17	3
guardduty:GetFindings	Read	19	3
guardduty:GetFindingsStatistics	Read	11	1
guardduty:GetIPSet	Read	16	3
guardduty:GetInvestigation	Read	10	1
guardduty:GetInvitationsCount	Read	11	1
guardduty:GetMalwareProtectionPlan	Read	16	3
guardduty:GetMalwareScan	Read	13	1
guardduty:GetMalwareScanSettings	Read	11	1
guardduty:GetMasterAccount	Read	16	3
guardduty:GetMemberDetectors	Read	14	2
guardduty:GetMembers	Read	16	3
guardduty:GetOrganizationStatistics	Read	11	1
guardduty:GetRemainingFreeTrialDays	Read	11	1
guardduty:GetThreatEntitySet	Read	14	2
guardduty:GetThreatIntelSet	Read	16	3
guardduty:GetTrustedEntitySet	Read	14	2
guardduty:GetUsageStatistics	Read	10	1
guardduty:InviteMembers	Write	6	1
guardduty:ListCoverage	List	13	1
guardduty:ListCustomDetectionRuleAssociations	List	12	1
guardduty:ListCustomDetectionRuleOrgConfigurations	List	12	1
guardduty:ListCustomDetectionRules	List	12	1
guardduty:ListDetectors	List	23	3
guardduty:ListFilters	List	17	3
guardduty:ListFindings	List	17	3
guardduty:ListIPSets	List	17	3
guardduty:ListInvestigationRecords	Read	12	1
guardduty:ListInvestigations	List	12	1
guardduty:ListInvitations	List	13	1
guardduty:ListMalwareProtectionPlans	List	16	3
guardduty:ListMalwareScans	List	13	1
guardduty:ListMembers	List	16	3
guardduty:ListOrganizationAdminAccounts	List	17	2
guardduty:ListPublishingDestinations	List	16	2
guardduty:ListTagsForResource	Read	15	3
guardduty:ListThreatEntitySets	List	16	3
guardduty:ListThreatIntelSets	List	17	3
guardduty:ListTrustedEntitySets	List	16	3
guardduty:SendObjectMalwareScan	Write	6	1
guardduty:SendSecurityTelemetry	Write	6	1
guardduty:StartMalwareScan	Write	9	1
guardduty:StartMonitoringMembers	Write	6	1
guardduty:StopMonitoringMembers	Write	6	1
guardduty:TagResource	Tagging	7	1
guardduty:UnarchiveFindings	Write	6	1
guardduty:UntagResource	Tagging	7	1
guardduty:UpdateCustomDetectionRuleAssociation	Write	6	1
guardduty:UpdateCustomDetectionRuleOrgConfiguration	Write	6	1
guardduty:UpdateDetector	Write	7	1
guardduty:UpdateFilter	Write	6	1
guardduty:UpdateFindingsFeedback	Write	7	1
guardduty:UpdateIPSet	Write	6	1
guardduty:UpdateMalwareProtectionPlan	Write	6	1
guardduty:UpdateMalwareScanSettings	Write	6	1
guardduty:UpdateMemberDetectors	Write	6	1
guardduty:UpdateOrganizationConfiguration	Write	7	1
guardduty:UpdatePublishingDestination	Write	6	1
guardduty:UpdateThreatEntitySet	Write	6	1
guardduty:UpdateThreatIntelSet	Write	6	1
guardduty:UpdateTrustedEntitySet	Write	6	1