You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- AWS permissions - The role “VmScanner” is assigned to the scanner when you enable agentless scanning. This role has the minimal permission set to create and clean up snapshots (scoped by tag) and to verify the current state of the VM. The detailed table of permissions is:
73
+
- AWS permissions - The role “VmScanner” is assigned to the scanner when you enable agentless scanning. This role has the minimal permission set to create and clean up snapshots (scoped by tag) and to verify the current state of the VM. The detailed permissions are:
74
74
75
75
| Attribute | Value |
76
76
|---------|---------|
77
77
| SID |**VmScannerDeleteSnapshotAccess**|
78
78
| Actions | ec2:DeleteSnapshot|
79
-
| Conditions | "StringEquals":{"ec2:ResourceTag/CreatedBy”:"Microsoft Defender for Cloud"} |
79
+
| Conditions | "StringEquals":{"ec2:ResourceTag/CreatedBy”:<br>"Microsoft Defender for Cloud"} |
0 commit comments