macie2.yml

Actions:
  - Name: macie2:AcceptInvitation
  - Name: macie2:BatchGetCustomDataIdentifiers
  - Name: macie2:CreateClassificationJob
  - Name: macie2:CreateCustomDataIdentifier
  - Name: macie2:CreateFindingsFilter
  - Name: macie2:CreateInvitations
  - Name: macie2:CreateMember
  - Name: macie2:CreateSampleFindings
  - Name: macie2:DeclineInvitations
  - Name: macie2:DeleteCustomDataIdentifier
  - Name: macie2:DeleteFindingsFilter
  - Name: macie2:DeleteInvitations
  - Name: macie2:DeleteMember
  - Name: macie2:DescribeBuckets
  - Name: macie2:DescribeClassificationJob
  - Name: macie2:DescribeOrganizationConfiguration
  - Name: macie2:DisableMacie
  - Name: macie2:DisableOrganizationAdminAccount
  - Name: macie2:DisassociateFromMasterAccount
  - Name: macie2:DisassociateMember
  - Name: macie2:EnableMacie
  - Name: macie2:EnableOrganizationAdminAccount
  - Name: macie2:GetBucketStatistics
  - Name: macie2:GetClassificationExportConfiguration
  - Name: macie2:GetCustomDataIdentifier
  - Name: macie2:GetFindingStatistics
  - Name: macie2:GetFindings
  - Name: macie2:GetFindingsFilter
  - Name: macie2:GetInvitationsCount
  - Name: macie2:GetMacieSession
  - Name: macie2:GetMasterAccount
  - Name: macie2:GetMember
  - Name: macie2:GetUsageStatistics
  - Name: macie2:GetUsageTotals
  - Name: macie2:ListClassificationJobs
  - Name: macie2:ListCustomDataIdentifiers
  - Name: macie2:ListFindings
  - Name: macie2:ListFindingsFilters
  - Name: macie2:ListInvitations
  - Name: macie2:ListMembers
  - Name: macie2:ListOrganizationAdminAccounts
  - Name: macie2:PutClassificationExportConfiguration
  - Name: macie2:TagResource
  - Name: macie2:TestCustomDataIdentifier
  - Name: macie2:UntagResource
  - Name: macie2:UpdateClassificationJob
  - Name: macie2:UpdateFindingsFilter
  - Name: macie2:UpdateMacieSession
  - Name: macie2:UpdateMemberSession
  - Name: macie2:UpdateOrganizationConfiguration

  # actions with no corresponding API
  - Name: macie2:ArchiveFindings
  - Name: macie2:ListTagsForResources
  - Name: macie2:UnarchiveFindings

  # APIs without an IAM action
  - Name: macie2:ListTagsForResource