Skip to content

Commit 9f8d431

Browse files
authored
styling?
1 parent 35ef347 commit 9f8d431

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/defender-for-cloud/concept-agentless-data-collection.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,13 +70,13 @@ The roles and permissions used by Defender for Cloud to perform agentless scanni
7070
- `Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read`
7171
- `Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read`
7272

73-
- AWS permissions - The role “VmScanner” is assigned to the scanner when you enable agentless scanning. This role has the minimal permission set to create and clean up snapshots (scoped by tag) and to verify the current state of the VM. The detailed table of permissions is:
73+
- AWS permissions - The role “VmScanner” is assigned to the scanner when you enable agentless scanning. This role has the minimal permission set to create and clean up snapshots (scoped by tag) and to verify the current state of the VM. The detailed permissions are:
7474

7575
| Attribute | Value |
7676
|---------|---------|
7777
| SID | **VmScannerDeleteSnapshotAccess** |
7878
| Actions | ec2:DeleteSnapshot |
79-
| Conditions | "StringEquals":{"ec2:ResourceTag/CreatedBy”:"Microsoft Defender for Cloud"} |
79+
| Conditions | "StringEquals":{"ec2:ResourceTag/CreatedBy”:<br>"Microsoft Defender for Cloud"} |
8080
| Resources | arn:aws:ec2:::snapshot/ |
8181
| Effect | Allow |
8282

0 commit comments

Comments
 (0)