shield.yml

Actions:
  - Name: shield:AssociateDRTLogBucket
  - Name: shield:AssociateDRTRole
  - Name: shield:CreateProtection
  - Name: shield:CreateSubscription
  - Name: shield:DeleteProtection
  - Name: shield:DeleteSubscription
  - Name: shield:DescribeAttack
  - Name: shield:DescribeDRTAccess
  - Name: shield:DescribeEmergencyContactSettings
  - Name: shield:DescribeProtection
  - Name: shield:DescribeSubscription
  - Name: shield:DisassociateDRTLogBucket
  - Name: shield:DisassociateDRTRole
  - Name: shield:GetSubscriptionState
  - Name: shield:ListAttacks
  - Name: shield:ListProtections
  - Name: shield:UpdateEmergencyContactSettings
  - Name: shield:UpdateSubscription

  # APIs without an IAM action
  - Name: shield:AssociateHealthCheck
  - Name: shield:AssociateProactiveEngagementDetails
  - Name: shield:DisableProactiveEngagement
  - Name: shield:DisassociateHealthCheck
  - Name: shield:EnableProactiveEngagement