Shield
Prefix shield, 40 actions · Domain Security, Identity & Compliance
2 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
Operator and limited (1)
- AWSElasticBeanstalkEKSTaggingOperator
Service roles (1)
Also grants Shield actions (26)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonEKSLoadBalancingPolicy
- AmazonEKSServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSFMAdminFullAccess
- AWSFMAdminReadOnlyAccess
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudFrontFullAccess
- FMSServiceRolePolicy
- NetworkSecurityManagerServiceRolePolicy
- PowerUserAccess
- PricingPlanManagerFullAccess
- ReadOnlyAccess
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
allowvendedlogdeliveryforresource associatedrtlogbucket associatedrtrole associatehealthcheck associateproactiveengagementdetails createprotection createprotectiongroup createsubscription deleteprotection deleteprotectiongroup deletesubscription describeattack describeattackcontributors describeattackstatistics describedrtaccess describeemergencycontactsettings describeprotection describeprotectiongroup describesubscription disableapplicationlayerautomaticresponse disableproactiveengagement disassociatedrtlogbucket disassociatedrtrole disassociatehealthcheck enableapplicationlayerautomaticresponse enableproactiveengagement getglobalthreatdata getsubscriptionstate listattacks listmitigations listprotectiongroups listprotections listresourcesinprotectiongroup listtagsforresource tagresource untagresource updateapplicationlayerautomaticresponse updateemergencycontactsettings updateprotectiongroup updatesubscription
Actions (40)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| shield:AllowVendedLogDeliveryForResource | Write | 5 | 1 |
| shield:AssociateDRTLogBucket | Write | 5 | 1 |
| shield:AssociateDRTRole | Write | 5 | 1 |
| shield:AssociateHealthCheck | Write | 5 | 1 |
| shield:AssociateProactiveEngagementDetails | Write | 5 | 1 |
| shield:CreateProtection | Write | 8 | 2 |
| shield:CreateProtectionGroup | Write | 5 | 1 |
| shield:CreateSubscription | Write | 7 | 1 |
| shield:DeleteProtection | Write | 8 | 1 |
| shield:DeleteProtectionGroup | Write | 5 | 1 |
| shield:DeleteSubscription | Write | 5 | 1 |
| shield:DescribeAttack | Read | 12 | 1 |
| shield:DescribeAttackContributors | Read | 11 | 1 |
| shield:DescribeAttackStatistics | Read | 12 | 1 |
| shield:DescribeDRTAccess | Read | 16 | 2 |
| shield:DescribeEmergencyContactSettings | Read | 12 | 2 |
| shield:DescribeProtection | Read | 18 | 3 |
| shield:DescribeProtectionGroup | Read | 15 | 3 |
| shield:DescribeSubscription | Read | 17 | 2 |
| shield:DisableApplicationLayerAutomaticResponse | Write | 6 | 1 |
| shield:DisableProactiveEngagement | Write | 5 | 1 |
| shield:DisassociateDRTLogBucket | Write | 5 | 1 |
| shield:DisassociateDRTRole | Write | 5 | 1 |
| shield:DisassociateHealthCheck | Write | 5 | 1 |
| shield:EnableApplicationLayerAutomaticResponse | Write | 6 | 1 |
| shield:EnableProactiveEngagement | Write | 5 | 1 |
| shield:GetGlobalThreatData | Read | 7 | 1 |
| shield:GetSubscriptionState | Read | 14 | 1 |
| shield:ListAttacks | List | 14 | 1 |
| shield:ListMitigations | List | 12 | 1 |
| shield:ListProtectionGroups | List | 16 | 3 |
| shield:ListProtections | List | 18 | 3 |
| shield:ListResourcesInProtectionGroup | List | 12 | 1 |
| shield:ListTagsForResource | Read | 15 | 3 |
| shield:TagResource | Tagging | 5 | 3 |
| shield:UntagResource | Tagging | 5 | 1 |
| shield:UpdateApplicationLayerAutomaticResponse | Write | 6 | 1 |
| shield:UpdateEmergencyContactSettings | Write | 6 | 1 |
| shield:UpdateProtectionGroup | Write | 5 | 1 |
| shield:UpdateSubscription | Write | 5 | 1 |