account_permissions

Creates, updates, deletes, gets or lists an account_permissions resource.

Overview

Name	account_permissions
Type	Resource
Id	aws.inspector2.account_permissions

Fields

The following fields are returned by SELECT queries:

list_account_permissions

Name	Datatype	Description
operation	string	The operations that can be performed with the given permissions. (ENABLE_SCANNING, DISABLE_SCANNING, ENABLE_REPOSITORY, DISABLE_REPOSITORY)
service	string	The services that the permissions allow an account to perform the given operations for. (EC2, ECR, LAMBDA)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_account_permissions	select	region		Lists the permissions an account has to configure Amazon Inspector. If the account is a member account or standalone account with resources managed by an Organizations policy, the operation returns fewer permissions.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_account_permissions

Lists the permissions an account has to configure Amazon Inspector. If the account is a member account or standalone account with resources managed by an Organizations policy, the operation returns fewer permissions.

SELECT
operation,
service
FROM aws.inspector2.account_permissions
WHERE region = '{{ region }}' -- required
;