Policy: AmazonGuardDutyFullAccess ARN: arn:aws:iam::aws:policy/AmazonGuardDutyFullAccess Allowed Actions Actions Services guardduty:* guardduty iam:CreateServiceLinkedRole iam iam:GetRole iam iam:PassRole iam organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:DescribeOrganizationalUnit organizations organizations:EnableAWSServiceAccess organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListDelegatedAdministrators organizations organizations:RegisterDelegatedAdministrator organizations