Mods
AWS

IAM Role: AWS/GuardDuty/Admin

PermissionGrant
guardduty:AcceptInvitationAdmin
guardduty:ArchiveFindingsAdmin
guardduty:CreateDetectorAdmin
guardduty:CreateFilterAdmin
guardduty:CreateIPSetAdmin
guardduty:CreateMembersAdmin
guardduty:CreatePublishingDestinationAdmin
guardduty:CreateSampleFindingsAdmin
guardduty:CreateThreatIntelSetAdmin
guardduty:DeclineInvitationsAdmin
guardduty:DeleteDetectorAdmin
guardduty:DeleteFilterAdmin
guardduty:DeleteIPSetAdmin
guardduty:DeleteInvitationsAdmin
guardduty:DeleteMembersAdmin
guardduty:DeletePublishingDestinationAdmin
guardduty:DeleteThreatIntelSetAdmin
guardduty:DisassociateFromMasterAccountAdmin
guardduty:DisassociateMembersAdmin
guardduty:InviteMembersAdmin
guardduty:StartMonitoringMembersAdmin
guardduty:StopMonitoringMembersAdmin
guardduty:TagResourceAdmin
guardduty:UnarchiveFindingsAdmin
guardduty:UntagResourceAdmin
guardduty:UpdateDetectorAdmin
guardduty:UpdateFilterAdmin
guardduty:UpdateFindingsFeedbackAdmin
guardduty:UpdateIPSetAdmin
guardduty:UpdatePublishingDestinationAdmin
guardduty:UpdateThreatIntelSetAdmin
guardduty:DescribePublishingDestinationReadOnly
guardduty:GetFindingsReadOnly
guardduty:GetMasterAccountReadOnly
guardduty:ListMembersReadOnly
guardduty:ListPublishingDestinationsReadOnly
guardduty:GetDetectorMetadata
guardduty:GetFilterMetadata
guardduty:GetFindingsStatisticsMetadata
guardduty:GetIPSetMetadata
guardduty:GetInvitationsCountMetadata
guardduty:GetMembersMetadata
guardduty:GetThreatIntelSetMetadata
guardduty:ListDetectorsMetadata
guardduty:ListFiltersMetadata
guardduty:ListFindingsMetadata
guardduty:ListIPSetsMetadata
guardduty:ListInvitationsMetadata
guardduty:ListTagsForResourceMetadata
guardduty:ListThreatIntelSetsMetadata