Inspector2
Prefix inspector2, 84 actions · Domain Security, Identity & Compliance
6 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 2 are service-linked role policies, shown with permission data only.
User access (3)
Operator and limited (1)
- AmazonInspector2ManagedCisPolicyOperator
Service-linked roles (2)
Also grants Inspector2 actions (22)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonInspector2ServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSContinuumCollectorServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSDMPServiceRolePolicy
- AWSSecurityHubFullAccess
- AWSServiceRoleForImageBuilder
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- EC2ImageBuilderExecutionPolicy
- PowerUserAccess
- ReadOnlyAccess
- SecurityAudit
- WellArchitectedAgentResourceScanning
associatemember batchassociatecodesecurityscanconfiguration batchdisassociatecodesecurityscanconfiguration batchgetaccountstatus batchgetcodesnippet batchgetfindingdetails batchgetfreetrialinfo batchgetmemberec2deepinspectionstatus batchupdatememberec2deepinspectionstatus cancelfindingsreport cancelsbomexport createcisscanconfiguration createcodesecurityintegration createcodesecurityscanconfiguration createconnector createfilter createfindingsreport createsbomexport deletecisscanconfiguration deletecodesecurityintegration deletecodesecurityscanconfiguration deleteconnector deletefilter describeorganizationconfiguration disable disabledelegatedadminaccount disassociatemember enable enabledelegatedadminaccount getcisscanreport getcisscanresultdetails getclustersforimage getcodesecurityintegration getcodesecurityscan getcodesecurityscanconfiguration getconfiguration getdelegatedadminaccount getec2deepinspectionconfiguration getencryptionkey getfindingsreportstatus getmember getondemandscanstatus getsbomexport listaccountpermissions listcisscanconfigurations listcisscanresultsaggregatedbychecks listcisscanresultsaggregatedbytargetresource listcisscans listcodesecurityintegrations listcodesecurityscanconfigurationassociations listcodesecurityscanconfigurations listconnectorscanconfigurations listconnectors listcoverage listcoveragestatistics listdelegatedadminaccounts listfilters listfindingaggregations listfindings listmembers listondemandscans listtagsforresource listusagetotals resetencryptionkey searchvulnerabilities sendcissessionhealth sendcissessiontelemetry startcissession startcodesecurityscan startondemandscan stopcissession tagresource untagresource updatecisscanconfiguration updatecodesecurityintegration updatecodesecurityscanconfiguration updateconfiguration updateconnector updateconnectorscanconfiguration updateec2deepinspectionconfiguration updateencryptionkey updatefilter updateorgec2deepinspectionconfiguration updateorganizationconfiguration
Actions (84)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| inspector2:AssociateMember | Write | 8 | 1 |
| inspector2:BatchAssociateCodeSecurityScanConfiguration | Write | 6 | 1 |
| inspector2:BatchDisassociateCodeSecurityScanConfiguration | Write | 6 | 1 |
| inspector2:BatchGetAccountStatus | Read | 15 | 1 |
| inspector2:BatchGetCodeSnippet | Read | 8 | 1 |
| inspector2:BatchGetFindingDetails | Read | 7 | 1 |
| inspector2:BatchGetFreeTrialInfo | Read | 10 | 1 |
| inspector2:BatchGetMemberEc2DeepInspectionStatus | Read | 8 | 1 |
| inspector2:BatchUpdateMemberEc2DeepInspectionStatus | Write | 6 | 1 |
| inspector2:CancelFindingsReport | Write | 6 | 1 |
| inspector2:CancelSbomExport | Write | 6 | 1 |
| inspector2:CreateCisScanConfiguration | Write | 6 | 1 |
| inspector2:CreateCodeSecurityIntegration | Write | 6 | 1 |
| inspector2:CreateCodeSecurityScanConfiguration | Write | 6 | 1 |
| inspector2:CreateConnector | Write | 6 | 2 |
| inspector2:CreateFilter | Write | 6 | 1 |
| inspector2:CreateFindingsReport | Write | 6 | 1 |
| inspector2:CreateSbomExport | Write | 6 | 1 |
| inspector2:DeleteCisScanConfiguration | Write | 6 | 1 |
| inspector2:DeleteCodeSecurityIntegration | Write | 6 | 1 |
| inspector2:DeleteCodeSecurityScanConfiguration | Write | 6 | 1 |
| inspector2:DeleteConnector | Write | 6 | 2 |
| inspector2:DeleteFilter | Write | 6 | 1 |
| inspector2:DescribeOrganizationConfiguration | Read | 11 | 1 |
| inspector2:Disable | Write | 9 | 1 |
| inspector2:DisableDelegatedAdminAccount | Write | 7 | 1 |
| inspector2:DisassociateMember | Write | 6 | 1 |
| inspector2:Enable | Write | 9 | 1 |
| inspector2:EnableDelegatedAdminAccount | Write | 9 | 1 |
| inspector2:GetCisScanReport | Read | 9 | 1 |
| inspector2:GetCisScanResultDetails | List | 8 | 1 |
| inspector2:GetClustersForImage | Read | 8 | 1 |
| inspector2:GetCodeSecurityIntegration | Read | 8 | 2 |
| inspector2:GetCodeSecurityScan | Read | 8 | 1 |
| inspector2:GetCodeSecurityScanConfiguration | Read | 11 | 2 |
| inspector2:GetConfiguration | Read | 11 | 1 |
| inspector2:GetDelegatedAdminAccount | Read | 14 | 1 |
| inspector2:GetEc2DeepInspectionConfiguration | Read | 10 | 1 |
| inspector2:GetEncryptionKey | Read | 9 | 1 |
| inspector2:GetFindingsReportStatus | Read | 10 | 1 |
| inspector2:GetMember | Read | 11 | 1 |
| inspector2:GetOnDemandScanStatus | Read | 8 | 3 |
| inspector2:GetSbomExport | Read | 10 | 1 |
| inspector2:ListAccountPermissions | List | 12 | 1 |
| inspector2:ListCisScanConfigurations | List | 13 | 2 |
| inspector2:ListCisScanResultsAggregatedByChecks | List | 11 | 1 |
| inspector2:ListCisScanResultsAggregatedByTargetResource | List | 11 | 1 |
| inspector2:ListCisScans | List | 12 | 1 |
| inspector2:ListCodeSecurityIntegrations | List | 10 | 2 |
| inspector2:ListCodeSecurityScanConfigurationAssociations | List | 10 | 1 |
| inspector2:ListCodeSecurityScanConfigurations | List | 13 | 2 |
| inspector2:ListConnectorScanConfigurations | List | 10 | 2 |
| inspector2:ListConnectors | List | 11 | 2 |
| inspector2:ListCoverage | List | 15 | 1 |
| inspector2:ListCoverageStatistics | List | 12 | 1 |
| inspector2:ListDelegatedAdminAccounts | List | 14 | 1 |
| inspector2:ListFilters | List | 16 | 3 |
| inspector2:ListFindingAggregations | List | 12 | 1 |
| inspector2:ListFindings | List | 16 | 1 |
| inspector2:ListMembers | List | 15 | 1 |
| inspector2:ListOnDemandScans | List | 10 | 3 |
| inspector2:ListTagsForResource | Read | 15 | 3 |
| inspector2:ListUsageTotals | List | 13 | 1 |
| inspector2:ResetEncryptionKey | Write | 6 | 1 |
| inspector2:SearchVulnerabilities | Read | 9 | 1 |
| inspector2:SendCisSessionHealth | Write | 7 | 1 |
| inspector2:SendCisSessionTelemetry | Write | 7 | 1 |
| inspector2:StartCisSession | Write | 7 | 1 |
| inspector2:StartCodeSecurityScan | Write | 6 | 1 |
| inspector2:StartOnDemandScan | Write | 6 | 3 |
| inspector2:StopCisSession | Write | 7 | 1 |
| inspector2:TagResource | Tagging | 6 | 1 |
| inspector2:UntagResource | Tagging | 6 | 1 |
| inspector2:UpdateCisScanConfiguration | Write | 6 | 1 |
| inspector2:UpdateCodeSecurityIntegration | Write | 6 | 1 |
| inspector2:UpdateCodeSecurityScanConfiguration | Write | 6 | 1 |
| inspector2:UpdateConfiguration | Write | 6 | 1 |
| inspector2:UpdateConnector | Write | 6 | 2 |
| inspector2:UpdateConnectorScanConfiguration | Write | 6 | 2 |
| inspector2:UpdateEc2DeepInspectionConfiguration | Write | 6 | 1 |
| inspector2:UpdateEncryptionKey | Write | 6 | 1 |
| inspector2:UpdateFilter | Write | 6 | 1 |
| inspector2:UpdateOrgEc2DeepInspectionConfiguration | Write | 6 | 1 |
| inspector2:UpdateOrganizationConfiguration | Write | 7 | 1 |