Skip to main content

Permissions required for Misconfigurations Detection

Pre-defined Policies​

  arn:aws:iam::aws:policy/SecurityAudit
  arn:aws:iam::aws:policy/ReadOnlyAccess

Additional Permissions​

  account:GetAccountInformation
  s3:ListBucket
  lambda:GetFunction
  dynamodb:DescribeTableReplicaAutoScaling
  sns:GetSubscriptionAttributes
  cloudwatch:GetMetricStatistics
  cloudwatch:ListMetrics
  billing:Get*
  payments:List*
  budgets:Describe*
  budgets:View*
  ce:Get*
  ce:Describe*
  ce:List*
  cur:Describe*
  cur:GetUsage*
  pricing:*
  account:GetAccountInformation
  savingsplans:Describe*