Policy: AWSSecurityHubFullAccess ARN: arn:aws:iam::aws:policy/AWSSecurityHubFullAccess Allowed Actions Actions Services guardduty:GetDetector guardduty guardduty:ListDetectors guardduty iam:CreateServiceLinkedRole iam inspector2:BatchGetAccountStatus inspector2 pricing:GetProducts pricing securityhub:* securityhub