Policy: AmazonGuardDutyMalwareProtectionServiceRolePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonGuardDutyMalwareProtectionServiceRolePolicy

Allowed Actions

Actions	Services
ebs:GetSnapshotBlock	ebs
ebs:ListSnapshotBlocks	ebs
ec2:CreateSnapshot	ec2
ec2:CreateSnapshot	ec2
ec2:CreateTags	ec2
ec2:CreateTags	ec2
ec2:DeleteSnapshot	ec2
ec2:DescribeInstances	ec2
ec2:DescribeSnapshots	ec2
ec2:DescribeVolumes	ec2
ec2:ModifySnapshotAttribute	ec2
ec2:ModifySnapshotAttribute	ec2
ecs:DescribeTasks	ecs
ecs:ListClusters	ecs
ecs:ListContainerInstances	ecs
ecs:ListTasks	ecs
eks:DescribeCluster	eks
kms:CreateGrant	kms
kms:DescribeKey	kms
kms:ReEncryptFrom	kms
kms:ReEncryptTo	kms
logs:CreateLogGroup	logs
logs:CreateLogStream	logs
logs:DescribeLogGroups	logs
logs:DescribeLogStreams	logs
logs:PutLogEvents	logs
logs:PutRetentionPolicy	logs