assurance

Grants permission to accept an invitation to connect an account to an environment

Grants permission to assign a permission set to a principal

Grants permission to retrieve multiple comments in a single request

Grants permission to retrieve multiple controls in a single request

Grants permission to retrieve multiple tasks in a single request

Grants permission to start a streaming chat session with the AI Governance agent

Grants permission to create an annotation on a piece of evidence

Grants permission to add a new comment to a specific control

Grants permission to create a leaf control within a custom framework

Grants permission to create a control group within a custom framework

Grants permission to create a new governance environment

Grants permission to create an environment connection

Grants permission to create a custom customer-owned framework

Grants permission to invite an account to connect to an environment

Grants permission to create a permission set in an environment

Grants permission to create a project

Grants permission to create a new task for a specific control and assessment

Grants permission to delete an annotation from a piece of evidence

Grants permission to delete a specific comment by its identifying fields

Grants permission to delete a custom control

Grants permission to delete a control group

Grants permission to delete a governance environment

Grants permission to delete an environment connection

Grants permission to remove an evidence item

Grants permission to delete a custom framework

Grants permission to delete an invitation or unlink a connected account

Grants permission to delete a permission set

Grants permission to delete a project and all its associated resources

Grants permission to deregister the delegated administrator for AWS Assurance in the caller's organization

Grants permission to disable a previously enabled framework for a specific project

Grants permission to enable a framework for a project

Grants permission to retrieve the annotation for a specific piece of evidence

Grants permission to retrieve a single assessment

Grants permission to retrieve the content of a prepared assessment report

Grants permission to retrieve the state of an assessment report export

Grants permission to get messages for a chat session in chronological order

Grants permission to retrieve a specific comment by its identifying fields

Grants permission to retrieve a single leaf control within a framework version

Grants permission to retrieve a single control group within a framework version

Grants permission to retrieve the effective compliance status of a control

Grants permission to retrieve a governance environment by ARN or domain

Grants permission to retrieve metadata for an evidence item

Grants permission to retrieve the content of an evidence item

Grants permission to retrieve a framework resource by type and key fields

Grants permission to retrieve an invitation

Grants permission to retrieve a permission set

Grants permission to retrieve a project

Grants permission to retrieve a specific task by its identifying fields

Grants permission to list the annotations on one assessment, paginated

Grants permission to list assessment journal records, paginated

Grants permission to list a compliance score over time

Grants permission to list assessments, paginated

Grants permission to list chat sessions for the calling user in a governance environment

Grants permission to list comments in a governance environment

Grants permission to list the contents of an environment connection

Grants permission to list control groups in a framework version

Grants permission to list in-scope resources for a control

Grants permission to list controls within a control group

Grants permission to list the resources found by a discovery job (paginated)

Grants permission to list enabled frameworks for a governance environment

Grants permission to list environment connections in a governance environment

Grants permission to list all governance environments with optional pagination

Grants permission to list evidence items (paginated)

Grants permission to list the annotations on one version of a piece of evidence within a project, paginated

Grants permission to list frameworks

Grants permission to list invitations addressed to the caller's account

Grants permission to list invitations extended from an owned environment

Grants permission to list permission set assignments in an environment

Grants permission to list permission sets in an environment

Grants permission to list all projects within a governance environment

Grants permission to list tags for a resource

Grants permission to list task history for a task

Grants permission to list all tasks within a governance environment

Grants permission to publish a custom framework

Grants permission to declare or remove an applicability override on a control or requirement

Grants permission to add evidence, or a new version of existing evidence, to support a compliance assessment

Grants permission to register a delegated administrator for AWS Assurance in the caller's organization

Grants permission to reject an invitation

Grants permission to revoke a permission set assignment

Grants permission to begin a new assessment for a control or framework

Grants permission to start preparing an assessment report

Grants permission to add or overwrite tags on a resource

Grants permission to remove tags from a resource

Grants permission to update the reviewer notes on an existing annotation

Grants permission to update an assessment's status and result

Grants permission to modify the content of an existing comment

Grants permission to update a custom control

Grants permission to update a control group's mutable attributes

Grants permission to update a governance environment

Grants permission to update evidence metadata and manage control links

Grants permission to update a custom framework

Grants permission to update a permission set

Grants permission to update a project

Grants permission to update an existing task's mutable fields

Grants permission to retrieve a short-lived access token for a third-party connection in an environment