{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_guardduty.html",
  "name": "Amazon GuardDuty",
  "prefix": "guardduty",
  "timestamp": "1786363206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_AcceptAdministratorInvitation.html",
      "name": "AcceptAdministratorInvitation",
      "description": "Grants permission to accept invitations to become a GuardDuty member account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_AcceptInvitation.html",
      "name": "AcceptInvitation",
      "description": "Grants permission to accept invitations to become a GuardDuty member account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ArchiveFindings.html",
      "name": "ArchiveFindings",
      "description": "Grants permission to archive GuardDuty findings",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateDetector.html",
      "name": "CreateDetector",
      "description": "Grants permission to create a detector",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateFilter.html",
      "name": "CreateFilter",
      "description": "Grants permission to create GuardDuty filters. A filters defines finding attributes and conditions used to filter findings",
      "access": "Write",
      "resources": [
        {
          "name": "filter",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateIPSet.html",
      "name": "CreateIPSet",
      "description": "Grants permission to create an IPSet",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateInvestigation.html",
      "name": "CreateInvestigation",
      "description": "Grants permission to create a GuardDuty investigation",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMalwareProtectionPlan.html",
      "name": "CreateMalwareProtectionPlan",
      "description": "Grants permission to create a new Malware Protection plan",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html",
      "name": "CreateMembers",
      "description": "Grants permission to create GuardDuty member accounts, where the account used to create a member becomes the GuardDuty administrator account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreatePublishingDestination.html",
      "name": "CreatePublishingDestination",
      "description": "Grants permission to create a publishing destination",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateSampleFindings.html",
      "name": "CreateSampleFindings",
      "description": "Grants permission to create sample findings",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateThreatEntitySet.html",
      "name": "CreateThreatEntitySet",
      "description": "Grants permission to create GuardDuty ThreatEntitySets, where a ThreatEntitySet consists of known malicious IP addresses and/or domains used by GuardDuty to generate findings",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateThreatIntelSet.html",
      "name": "CreateThreatIntelSet",
      "description": "Grants permission to create GuardDuty ThreatIntelSets, where a ThreatIntelSet consists of known malicious IP addresses used by GuardDuty to generate findings",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateTrustedEntitySet.html",
      "name": "CreateTrustedEntitySet",
      "description": "Grants permission to create a TrustedEntitySet",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeclineInvitations.html",
      "name": "DeclineInvitations",
      "description": "Grants permission to decline invitations to become a GuardDuty member account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteDetector.html",
      "name": "DeleteDetector",
      "description": "Grants permission to delete GuardDuty detectors",
      "access": "Write",
      "resources": [
        {
          "name": "detector",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteFilter.html",
      "name": "DeleteFilter",
      "description": "Grants permission to delete GuardDuty filters",
      "access": "Write",
      "resources": [
        {
          "name": "filter",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteIPSet.html",
      "name": "DeleteIPSet",
      "description": "Grants permission to delete GuardDuty IPSets",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteInvitations.html",
      "name": "DeleteInvitations",
      "description": "Grants permission to delete invitations to become a GuardDuty member account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMalwareProtectionPlan.html",
      "name": "DeleteMalwareProtectionPlan",
      "description": "Grants permission to delete a Malware Protection plan",
      "access": "Write",
      "resources": [
        {
          "name": "malwareprotectionplan",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html",
      "name": "DeleteMembers",
      "description": "Grants permission to delete GuardDuty member accounts",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeletePublishingDestination.html",
      "name": "DeletePublishingDestination",
      "description": "Grants permission to delete a publishing destination",
      "access": "Write",
      "resources": [
        {
          "name": "publishingDestination",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteThreatEntitySet.html",
      "name": "DeleteThreatEntitySet",
      "description": "Grants permission to delete GuardDuty ThreatEntitySets",
      "access": "Write",
      "resources": [
        {
          "name": "threatentityset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteThreatIntelSet.html",
      "name": "DeleteThreatIntelSet",
      "description": "Grants permission to delete GuardDuty ThreatIntelSets",
      "access": "Write",
      "resources": [
        {
          "name": "threatintelset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteTrustedEntitySet.html",
      "name": "DeleteTrustedEntitySet",
      "description": "Grants permission to delete GuardDuty TrustedEntitySets",
      "access": "Write",
      "resources": [
        {
          "name": "trustedentityset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeMalwareScans.html",
      "name": "DescribeMalwareScans",
      "description": "Grants permission to retrieve details about malware scans",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html",
      "name": "DescribeOrganizationConfiguration",
      "description": "Grants permission to retrieve details about the delegated administrator associated with a GuardDuty detector",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribePublishingDestination.html",
      "name": "DescribePublishingDestination",
      "description": "Grants permission to retrieve details about a publishing destination",
      "access": "Read",
      "resources": [
        {
          "name": "publishingDestination",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisableOrganizationAdminAccount.html",
      "name": "DisableOrganizationAdminAccount",
      "description": "Grants permission to disable the organization delegated administrator for GuardDuty",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateFromAdministratorAccount.html",
      "name": "DisassociateFromAdministratorAccount",
      "description": "Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateFromMasterAccount.html",
      "name": "DisassociateFromMasterAccount",
      "description": "Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html",
      "name": "DisassociateMembers",
      "description": "Grants permission to disassociate GuardDuty member accounts from their administrator GuardDuty account",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_EnableOrganizationAdminAccount.html",
      "name": "EnableOrganizationAdminAccount",
      "description": "Grants permission to enable an organization delegated administrator for GuardDuty",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetAdministratorAccount.html",
      "name": "GetAdministratorAccount",
      "description": "Grants permission to retrieve details of the GuardDuty administrator account associated with a member account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetCoverageStatistics.html",
      "name": "GetCoverageStatistics",
      "description": "Grants permission to list Amazon GuardDuty coverage statistics for the specified GuardDuty account in a Region",
      "access": "Read",
      "resources": [
        {
          "name": "detector",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetDetector.html",
      "name": "GetDetector",
      "description": "Grants permission to retrieve GuardDuty detectors",
      "access": "Read",
      "resources": [
        {
          "name": "detector",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFilter.html",
      "name": "GetFilter",
      "description": "Grants permission to retrieve GuardDuty filters",
      "access": "Read",
      "resources": [
        {
          "name": "filter",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFindings.html",
      "name": "GetFindings",
      "description": "Grants permission to retrieve GuardDuty findings",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetFindingsStatistics.html",
      "name": "GetFindingsStatistics",
      "description": "Grants permission to retrieve a list of GuardDuty finding statistics",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetIPSet.html",
      "name": "GetIPSet",
      "description": "Grants permission to retrieve GuardDuty IPSets",
      "access": "Read",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetInvestigation.html",
      "name": "GetInvestigation",
      "description": "Grants permission to retrieve a GuardDuty investigation",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetInvitationsCount.html",
      "name": "GetInvitationsCount",
      "description": "Grants permission to retrieve the count of all GuardDuty invitations sent to a specified account, which does not include the accepted invitation",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareProtectionPlan.html",
      "name": "GetMalwareProtectionPlan",
      "description": "Grants permission to retrieve a Malware Protection plan details",
      "access": "Read",
      "resources": [
        {
          "name": "malwareprotectionplan",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScan.html",
      "name": "GetMalwareScan",
      "description": "Grants permission to retrieve a malware scan's details",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScanSettings.html",
      "name": "GetMalwareScanSettings",
      "description": "Grants permission to retrieve the malware scan settings",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMasterAccount.html",
      "name": "GetMasterAccount",
      "description": "Grants permission to retrieve details of the GuardDuty administrator account associated with a member account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMemberDetectors.html",
      "name": "GetMemberDetectors",
      "description": "Grants permission to describe which data sources are enabled for member accounts detectors",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMembers.html",
      "name": "GetMembers",
      "description": "Grants permission to retrieve the member accounts associated with an administrator account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetOrganizationStatistics.html",
      "name": "GetOrganizationStatistics",
      "description": "Grants permission to retrieve GuardDuty protection plan coverage statistics for member accounts in a Region",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetRemainingFreeTrialDays.html",
      "name": "GetRemainingFreeTrialDays",
      "description": "Grants permission to provide the number of days left for each data source used in the free trial period",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetThreatEntitySet.html",
      "name": "GetThreatEntitySet",
      "description": "Grants permission to retrieve GuardDuty ThreatEntitySets",
      "access": "Read",
      "resources": [
        {
          "name": "threatentityset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetThreatIntelSet.html",
      "name": "GetThreatIntelSet",
      "description": "Grants permission to retrieve GuardDuty ThreatIntelSets",
      "access": "Read",
      "resources": [
        {
          "name": "threatintelset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetTrustedEntitySet.html",
      "name": "GetTrustedEntitySet",
      "description": "Grants permission to retrieve GuardDuty TrustedEntitySets",
      "access": "Read",
      "resources": [
        {
          "name": "trustedentityset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetUsageStatistics.html",
      "name": "GetUsageStatistics",
      "description": "Grants permission to list Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html",
      "name": "InviteMembers",
      "description": "Grants permission to invite other AWS accounts to enable GuardDuty and become GuardDuty member accounts",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListCoverage.html",
      "name": "ListCoverage",
      "description": "Grants permission to list all the resource details for a given account in a Region",
      "access": "List",
      "resources": [
        {
          "name": "detector",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html",
      "name": "ListDetectors",
      "description": "Grants permission to retrieve a list of GuardDuty detectors",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListFilters.html",
      "name": "ListFilters",
      "description": "Grants permission to retrieve a list of GuardDuty filters",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListFindings.html",
      "name": "ListFindings",
      "description": "Grants permission to retrieve a list of GuardDuty findings",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListIPSets.html",
      "name": "ListIPSets",
      "description": "Grants permission to retrieve a list of GuardDuty IPSets",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListInvestigations.html",
      "name": "ListInvestigations",
      "description": "Grants permission to retrieve a list of GuardDuty investigations",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListInvitations.html",
      "name": "ListInvitations",
      "description": "Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMalwareProtectionPlans.html",
      "name": "ListMalwareProtectionPlans",
      "description": "Grants permission to retrieve a list of Malware Protection plans",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMalwareScans.html",
      "name": "ListMalwareScans",
      "description": "Grants permission to retrieve a list of malware scans",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMembers.html",
      "name": "ListMembers",
      "description": "Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListOrganizationAdminAccounts.html",
      "name": "ListOrganizationAdminAccounts",
      "description": "Grants permission to list details about the organization delegated administrator for GuardDuty",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListPublishingDestinations.html",
      "name": "ListPublishingDestinations",
      "description": "Grants permission to retrieve a list of publishing destinations",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to retrieve a list of tags associated with a GuardDuty resource",
      "access": "Read",
      "resources": [
        {
          "name": "detector",
          "is_required": false
        },
        {
          "name": "filter",
          "is_required": false
        },
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "malwareprotectionplan",
          "is_required": false
        },
        {
          "name": "publishingDestination",
          "is_required": false
        },
        {
          "name": "threatentityset",
          "is_required": false
        },
        {
          "name": "threatintelset",
          "is_required": false
        },
        {
          "name": "trustedentityset",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListThreatEntitySets.html",
      "name": "ListThreatEntitySets",
      "description": "Grants permission to retrieve a list of GuardDuty ThreatEntitySets",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListThreatIntelSets.html",
      "name": "ListThreatIntelSets",
      "description": "Grants permission to retrieve a list of GuardDuty ThreatIntelSets",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListTrustedEntitySets.html",
      "name": "ListTrustedEntitySets",
      "description": "Grants permission to retrieve a list of GuardDuty TrustedEntitySets",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendObjectMalwareScan.html",
      "name": "SendObjectMalwareScan",
      "description": "Grants permission to initiate a new object malware scan",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendSecurityTelemetry.html",
      "name": "SendSecurityTelemetry",
      "description": "Grants permission to send security telemetry for a specific GuardDuty account in a Region",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StartMalwareScan.html",
      "name": "StartMalwareScan",
      "description": "Grants permission to initiate a new malware scan",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StartMonitoringMembers.html",
      "name": "StartMonitoringMembers",
      "description": "Grants permission to a GuardDuty administrator account to monitor findings from GuardDuty member accounts",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_StopMonitoringMembers.html",
      "name": "StopMonitoringMembers",
      "description": "Grants permission to disable monitoring findings from member accounts",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add tags to a GuardDuty resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "detector",
          "is_required": false
        },
        {
          "name": "filter",
          "is_required": false
        },
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "malwareprotectionplan",
          "is_required": false
        },
        {
          "name": "publishingDestination",
          "is_required": false
        },
        {
          "name": "threatentityset",
          "is_required": false
        },
        {
          "name": "threatintelset",
          "is_required": false
        },
        {
          "name": "trustedentityset",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UnarchiveFindings.html",
      "name": "UnarchiveFindings",
      "description": "Grants permission to unarchive GuardDuty findings",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove tags from a GuardDuty resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "detector",
          "is_required": false
        },
        {
          "name": "filter",
          "is_required": false
        },
        {
          "name": "ipset",
          "is_required": false
        },
        {
          "name": "malwareprotectionplan",
          "is_required": false
        },
        {
          "name": "publishingDestination",
          "is_required": false
        },
        {
          "name": "threatentityset",
          "is_required": false
        },
        {
          "name": "threatintelset",
          "is_required": false
        },
        {
          "name": "trustedentityset",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateDetector.html",
      "name": "UpdateDetector",
      "description": "Grants permission to update GuardDuty detectors",
      "access": "Write",
      "resources": [
        {
          "name": "detector",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateFilter.html",
      "name": "UpdateFilter",
      "description": "Grants permission to updates GuardDuty filters",
      "access": "Write",
      "resources": [
        {
          "name": "filter",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateFindingsFeedback.html",
      "name": "UpdateFindingsFeedback",
      "description": "Grants permission to update findings feedback to mark GuardDuty findings as useful or not useful",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateIPSet.html",
      "name": "UpdateIPSet",
      "description": "Grants permission to update GuardDuty IPSets",
      "access": "Write",
      "resources": [
        {
          "name": "ipset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMalwareProtectionPlan.html",
      "name": "UpdateMalwareProtectionPlan",
      "description": "Grants permission to update the Malware Protection plan",
      "access": "Write",
      "resources": [
        {
          "name": "malwareprotectionplan",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMalwareScanSettings.html",
      "name": "UpdateMalwareScanSettings",
      "description": "Grants permission to update the malware scan settings",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMemberDetectors.html",
      "name": "UpdateMemberDetectors",
      "description": "Grants permission to update which data sources are enabled for member accounts detectors",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateOrganizationConfiguration.html",
      "name": "UpdateOrganizationConfiguration",
      "description": "Grants permission to update the delegated administrator configuration associated with a GuardDuty detector",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdatePublishingDestination.html",
      "name": "UpdatePublishingDestination",
      "description": "Grants permission to update a publishing destination",
      "access": "Write",
      "resources": [
        {
          "name": "publishingDestination",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatEntitySet.html",
      "name": "UpdateThreatEntitySet",
      "description": "Grants permission to update GuardDuty ThreatEntitySets",
      "access": "Write",
      "resources": [
        {
          "name": "threatentityset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatIntelSet.html",
      "name": "UpdateThreatIntelSet",
      "description": "Grants permission to updates the GuardDuty ThreatIntelSets",
      "access": "Write",
      "resources": [
        {
          "name": "threatintelset",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateTrustedEntitySet.html",
      "name": "UpdateTrustedEntitySet",
      "description": "Grants permission to update GuardDuty TrustedEntitySets",
      "access": "Write",
      "resources": [
        {
          "name": "trustedentityset",
          "is_required": true
        }
      ],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "detector",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "filter",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/filter/${FilterName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "ipset",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/ipset/${IPSetId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "malwareprotectionplan",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/${MalwareProtectionPlanId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "publishingDestination",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/publishingdestination/${PublishingDestinationId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "threatentityset",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/threatentityset/${ThreatEntitySetId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "threatintelset",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/threatintelset/${ThreatIntelSetId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
      "name": "trustedentityset",
      "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/trustedentityset/${TrustedEntitySetId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by tag key-value pairs in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by tag key-value pairs attached to the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by tag keys in the request",
      "type": "ArrayOfString"
    }
  ]
}