本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
AWSSecurityIncidentResponseFullAccess
描述: 政策可為客戶提供與安全事件回應服務相關聯的所有資源的讀取和寫入許可。
AWSSecurityIncidentResponseFullAccess
是AWS 受管政策。
使用此政策
您可以AWSSecurityIncidentResponseFullAccess
連接到您的使用者、群組和角色。
政策詳細資訊
-
類型: AWS 受管政策
-
建立時間:2024 年 12 月 1 日 23:21 UTC
-
編輯時間:2024 年 12 月 1 日 23:21 UTC
-
ARN:
arn:aws:iam::aws:policy/AWSSecurityIncidentResponseFullAccess
政策版本
政策版本:v1 (預設值)
政策的預設版本是定義政策許可的版本。當具有 政策的使用者或角色提出存取 AWS 資源的請求時, 會 AWS 檢查政策的預設版本,以決定是否允許請求。
JSON 政策文件
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "SecurityIRReadAccess",
"Effect" : "Allow",
"Action" : [
"security-ir:BatchGetMemberAccountDetails",
"security-ir:GetMembership",
"security-ir:ListMemberships",
"security-ir:GetCase",
"security-ir:ListCases",
"security-ir:GetCaseAttachmentDownloadUrl",
"security-ir:ListComments",
"security-ir:ListCaseEdits",
"security-ir:ListTagsForResource"
],
"Resource" : "*"
},
{
"Sid" : "SecurityIRWriteAccess",
"Effect" : "Allow",
"Action" : [
"security-ir:CreateMembership",
"security-ir:UpdateMembership",
"security-ir:CancelMembership",
"security-ir:CreateCase",
"security-ir:UpdateCase",
"security-ir:CloseCase",
"security-ir:UpdateCaseStatus",
"security-ir:UpdateResolverType",
"security-ir:GetCaseAttachmentUploadUrl",
"security-ir:CreateCaseComment",
"security-ir:UpdateCaseComment",
"security-ir:TagResource",
"security-ir:UntagResource"
],
"Resource" : "*",
"Condition" : {
"Bool" : {
"aws:MultiFactorAuthPresent" : "true"
}
}
},
{
"Sid" : "AllowCreationOfServiceLinkedRoleForSecurityIncidentResponse",
"Effect" : "Allow",
"Action" : [
"iam:CreateServiceLinkedRole"
],
"Resource" : [
"arn:aws:iam::*:role/aws-service-role/security-ir.amazonaws.com/AWSServiceRoleForSecurityIncidentResponse"
],
"Condition" : {
"StringLike" : {
"iam:AWSServiceName" : "security-ir.amazonaws.com"
}
}
},
{
"Sid" : "AllowCreationOfServiceLinkedRoleForSecurityIncidentResponseTriage",
"Effect" : "Allow",
"Action" : [
"iam:CreateServiceLinkedRole"
],
"Resource" : [
"arn:aws:iam::*:role/aws-service-role/triage.security-ir.amazonaws.com/AWSServiceRoleForSecurityIncidentResponse_Triage"
],
"Condition" : {
"StringLike" : {
"iam:AWSServiceName" : "triage.security-ir.amazonaws.com"
}
}
},
{
"Sid" : "OrganizationsPolicies",
"Effect" : "Allow",
"Action" : [
"organizations:DescribeOrganization",
"organizations:ListDelegatedAdministrators"
],
"Resource" : "*"
}
]
}