SecurityHub
Prefix securityhub, 141 actions · Domain Security, Identity & Compliance
6 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 4 are service-linked role policies, shown with permission data only.
User access (2)
Service-linked roles (4)
Also grants SecurityHub actions (24)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDetectiveFullAccess
- AmazonDetectiveInvestigatorAccess
- AmazonSSMServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSControlTowerAccountServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSDMPServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- WellArchitectedAgentResourceScanning
acceptadministratorinvitation acceptinvitation allowvendedlogdeliveryforresource batchdeleteautomationrules batchdisablestandards batchenablestandards batchgetautomationrules batchgetconfigurationpolicyassociations batchgetcontrolevaluations batchgetenabledregionsv2 batchgetsecuritycontrols batchgetstandardscontrolassociations batchimportfindings batchupdateautomationrules batchupdatefindings batchupdatestandardscontrolassociations cancelexportjobv2 connectorregistrationsv2 createactiontarget createaggregatorv2 createautomationrule createautomationrulev2 createconfigurationpolicy createconnector createconnectorv2 createfindingaggregator createinsight createmembers createticketv2 declineinvitations deleteactiontarget deleteaggregatorv2 deleteautomationrulev2 deleteconfigurationpolicy deleteconnector deleteconnectorv2 deletefindingaggregator deleteinsight deleteinvitations deletemembers describeactiontargets describehub describeorganizationconfiguration describeproducts describeproductsv2 describesecurityhubv2 describestandards describestandardscontrols disableimportfindingsforproduct disableorganizationadminaccount disablesecurityhub disablesecurityhubfeaturev2 disablesecurityhubv2 disassociatefromadministratoraccount disassociatefrommasteraccount disassociatemembers enableimportfindingsforproduct enableorganizationadminaccount enablesecurityhub enablesecurityhubfeaturev2 enablesecurityhubv2 generaterecommendedpolicyv2 getadhocinsightresults getadministratoraccount getaggregatorv2 getautomationrulev2 getcspmorganizationsimportstatus getconfigurationpolicy getconfigurationpolicyassociation getconnector getconnectorv2 getcontrolfindingsummary getcoveragestatisticsv2 getenabledstandards getexportjobv2 getfindingaggregator getfindinghistory getfindings getfindingstrendsv2 getfreetrialenddate getfreetrialusage getinsightfindingtrend getinsightresults getinsights getinvitationscount getmasteraccount getmembers getrecommendedpolicyv2 getremediationsv2 getresourcesstatisticsv2 getresourcestrendsv2 getresourcesv2 getsecuritycontroldefinition getsoftwareresourcesv2 getsoftwarestatisticsv2 getsoftwarev2 getusage getusagev2 invitemembers listaccountusagev2 listaggregatorsv2 listautomationrules listautomationrulesv2 listconfigurationpolicies listconfigurationpolicyassociations listconnectors listconnectorsv2 listcontrolevaluationsummaries listenabledproductsforimport listexportjobsv2 listexposuresbyremediationv2 listfindingaggregators listfreetrialstatusesv2 listinvitations listmembers listorganizationadminaccounts listsecuritycontroldefinitions liststandardscontrolassociations listtagsforresource putcspmorganizationsimportstatus sendfindingevents sendinsightevents startconfigurationpolicyassociation startconfigurationpolicydisassociation startexportjobv2 tagresource untagresource updateactiontarget updateaggregatorv2 updateautomationrulev2 updateconfigurationpolicy updateconnector updateconnectorv2 updatefindingaggregator updatefindings updateinsight updateorganizationconfiguration updatesecuritycontrol updatesecurityhubconfiguration updatesecurityhubv2 updatestandardscontrol
Actions (141)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| securityhub:AcceptAdministratorInvitation | Write | 5 | 1 |
| securityhub:AcceptInvitation | Write | 5 | 1 |
| securityhub:AllowVendedLogDeliveryForResource | Permissions management | 5 | 2 |
| securityhub:BatchDeleteAutomationRules | Write | 5 | 1 |
| securityhub:BatchDisableStandards | Write | 6 | 1 |
| securityhub:BatchEnableStandards | Write | 6 | 1 |
| securityhub:BatchGetAutomationRules | Read | 12 | 2 |
| securityhub:BatchGetConfigurationPolicyAssociations | Read | 9 | 1 |
| securityhub:BatchGetControlEvaluations | Read | 8 | 1 |
| securityhub:BatchGetEnabledRegionsV2 | Read | 7 | 1 |
| securityhub:BatchGetSecurityControls | Read | 12 | 3 |
| securityhub:BatchGetStandardsControlAssociations | Read | 9 | 1 |
| securityhub:BatchImportFindings | Write | 5 | 1 |
| securityhub:BatchUpdateAutomationRules | Write | 5 | 1 |
| securityhub:BatchUpdateFindings | Write | 6 | 2 |
| securityhub:BatchUpdateStandardsControlAssociations | Write | 6 | 1 |
| securityhub:CancelExportJobV2 | Write | 5 | 1 |
| securityhub:ConnectorRegistrationsV2 | Write | 5 | 1 |
| securityhub:CreateActionTarget | Write | 5 | 1 |
| securityhub:CreateAggregatorV2 | Write | 5 | 1 |
| securityhub:CreateAutomationRule | Write | 5 | 1 |
| securityhub:CreateAutomationRuleV2 | Write | 5 | 1 |
| securityhub:CreateConfigurationPolicy | Write | 5 | 1 |
| securityhub:CreateConnector | Write | 5 | 2 |
| securityhub:CreateConnectorV2 | Write | 5 | 1 |
| securityhub:CreateFindingAggregator | Write | 5 | 1 |
| securityhub:CreateInsight | Write | 5 | 1 |
| securityhub:CreateMembers | Write | 6 | 1 |
| securityhub:CreateTicketV2 | Write | 5 | 1 |
| securityhub:DeclineInvitations | Write | 5 | 1 |
| securityhub:DeleteActionTarget | Write | 5 | 1 |
| securityhub:DeleteAggregatorV2 | Write | 5 | 1 |
| securityhub:DeleteAutomationRuleV2 | Write | 5 | 1 |
| securityhub:DeleteConfigurationPolicy | Write | 5 | 1 |
| securityhub:DeleteConnector | Write | 5 | 2 |
| securityhub:DeleteConnectorV2 | Write | 5 | 1 |
| securityhub:DeleteFindingAggregator | Write | 5 | 1 |
| securityhub:DeleteInsight | Write | 5 | 1 |
| securityhub:DeleteInvitations | Write | 5 | 1 |
| securityhub:DeleteMembers | Write | 6 | 1 |
| securityhub:DescribeActionTargets | Read | 11 | 1 |
| securityhub:DescribeHub | Read | 18 | 5 |
| securityhub:DescribeOrganizationConfiguration | Read | 16 | 2 |
| securityhub:DescribeProducts | Read | 10 | 1 |
| securityhub:DescribeProductsV2 | Read | 11 | 1 |
| securityhub:DescribeSecurityHubV2 | Read | 12 | 4 |
| securityhub:DescribeStandards | Read | 12 | 1 |
| securityhub:DescribeStandardsControls | Read | 15 | 3 |
| securityhub:DisableImportFindingsForProduct | Write | 5 | 1 |
| securityhub:DisableOrganizationAdminAccount | Write | 5 | 1 |
| securityhub:DisableSecurityHub | Write | 6 | 1 |
| securityhub:DisableSecurityHubFeatureV2 | Write | 5 | 2 |
| securityhub:DisableSecurityHubV2 | Write | 5 | 2 |
| securityhub:DisassociateFromAdministratorAccount | Write | 6 | 1 |
| securityhub:DisassociateFromMasterAccount | Write | 5 | 1 |
| securityhub:DisassociateMembers | Write | 6 | 1 |
| securityhub:EnableImportFindingsForProduct | Write | 5 | 1 |
| securityhub:EnableOrganizationAdminAccount | Write | 5 | 1 |
| securityhub:EnableSecurityHub | Write | 6 | 1 |
| securityhub:EnableSecurityHubFeatureV2 | Write | 5 | 2 |
| securityhub:EnableSecurityHubV2 | Write | 5 | 2 |
| securityhub:GenerateRecommendedPolicyV2 | Write | 5 | 1 |
| securityhub:GetAdhocInsightResults | Read | 8 | 1 |
| securityhub:GetAdministratorAccount | Read | 8 | 1 |
| securityhub:GetAggregatorV2 | Read | 13 | 2 |
| securityhub:GetAutomationRuleV2 | Read | 13 | 2 |
| securityhub:GetCSPMOrganizationsImportStatus | Read | 8 | 1 |
| securityhub:GetConfigurationPolicy | Read | 15 | 2 |
| securityhub:GetConfigurationPolicyAssociation | Read | 15 | 2 |
| securityhub:GetConnector | Read | 8 | 1 |
| securityhub:GetConnectorV2 | Read | 10 | 2 |
| securityhub:GetControlFindingSummary | Read | 8 | 1 |
| securityhub:GetCoverageStatisticsV2 | Read | 8 | 1 |
| securityhub:GetEnabledStandards | List | 16 | 5 |
| securityhub:GetExportJobV2 | Read | 8 | 1 |
| securityhub:GetFindingAggregator | Read | 15 | 2 |
| securityhub:GetFindingHistory | Read | 9 | 1 |
| securityhub:GetFindings | Read | 13 | 3 |
| securityhub:GetFindingsTrendsV2 | Read | 8 | 1 |
| securityhub:GetFreeTrialEndDate | Read | 8 | 1 |
| securityhub:GetFreeTrialUsage | Read | 8 | 1 |
| securityhub:GetInsightFindingTrend | Read | 8 | 1 |
| securityhub:GetInsightResults | Read | 9 | 1 |
| securityhub:GetInsights | List | 12 | 2 |
| securityhub:GetInvitationsCount | Read | 8 | 1 |
| securityhub:GetMasterAccount | Read | 9 | 1 |
| securityhub:GetMembers | Read | 9 | 1 |
| securityhub:GetRecommendedPolicyV2 | Read | 8 | 1 |
| securityhub:GetRemediationsV2 | Read | 8 | 1 |
| securityhub:GetResourcesStatisticsV2 | Read | 8 | 1 |
| securityhub:GetResourcesTrendsV2 | Read | 8 | 1 |
| securityhub:GetResourcesV2 | Read | 9 | 1 |
| securityhub:GetSecurityControlDefinition | Read | 8 | 1 |
| securityhub:GetSoftwareResourcesV2 | Read | 8 | 1 |
| securityhub:GetSoftwareStatisticsV2 | Read | 8 | 1 |
| securityhub:GetSoftwareV2 | Read | 8 | 1 |
| securityhub:GetUsage | Read | 8 | 1 |
| securityhub:GetUsageV2 | Read | 8 | 1 |
| securityhub:InviteMembers | Write | 5 | 1 |
| securityhub:ListAccountUsageV2 | List | 10 | 1 |
| securityhub:ListAggregatorsV2 | List | 15 | 2 |
| securityhub:ListAutomationRules | List | 12 | 2 |
| securityhub:ListAutomationRulesV2 | List | 15 | 2 |
| securityhub:ListConfigurationPolicies | List | 15 | 2 |
| securityhub:ListConfigurationPolicyAssociations | List | 15 | 2 |
| securityhub:ListConnectors | List | 10 | 1 |
| securityhub:ListConnectorsV2 | List | 12 | 2 |
| securityhub:ListControlEvaluationSummaries | Read | 10 | 1 |
| securityhub:ListEnabledProductsForImport | List | 15 | 3 |
| securityhub:ListExportJobsV2 | List | 10 | 1 |
| securityhub:ListExposuresByRemediationV2 | List | 10 | 1 |
| securityhub:ListFindingAggregators | List | 16 | 2 |
| securityhub:ListFreeTrialStatusesV2 | List | 10 | 1 |
| securityhub:ListInvitations | List | 11 | 1 |
| securityhub:ListMembers | List | 11 | 1 |
| securityhub:ListOrganizationAdminAccounts | List | 11 | 2 |
| securityhub:ListSecurityControlDefinitions | List | 12 | 3 |
| securityhub:ListStandardsControlAssociations | List | 11 | 1 |
| securityhub:ListTagsForResource | Read | 14 | 3 |
| securityhub:PutCSPMOrganizationsImportStatus | Write | 5 | 1 |
| securityhub:SendFindingEvents | Read | 5 | 1 |
| securityhub:SendInsightEvents | Read | 5 | 1 |
| securityhub:StartConfigurationPolicyAssociation | Write | 5 | 1 |
| securityhub:StartConfigurationPolicyDisassociation | Write | 5 | 1 |
| securityhub:StartExportJobV2 | Write | 5 | 1 |
| securityhub:TagResource | Tagging | 6 | 1 |
| securityhub:UntagResource | Tagging | 6 | 1 |
| securityhub:UpdateActionTarget | Write | 5 | 1 |
| securityhub:UpdateAggregatorV2 | Write | 5 | 1 |
| securityhub:UpdateAutomationRuleV2 | Write | 5 | 1 |
| securityhub:UpdateConfigurationPolicy | Write | 5 | 1 |
| securityhub:UpdateConnector | Write | 5 | 2 |
| securityhub:UpdateConnectorV2 | Write | 5 | 1 |
| securityhub:UpdateFindingAggregator | Write | 5 | 1 |
| securityhub:UpdateFindings | Write | 5 | 2 |
| securityhub:UpdateInsight | Write | 5 | 1 |
| securityhub:UpdateOrganizationConfiguration | Write | 6 | 1 |
| securityhub:UpdateSecurityControl | Write | 6 | 1 |
| securityhub:UpdateSecurityHubConfiguration | Write | 6 | 1 |
| securityhub:UpdateSecurityHubV2 | Write | 5 | 2 |
| securityhub:UpdateStandardsControl | Write | 6 | 1 |