fix(iam): add apply-role IAM list permissions (PLAT-146)

IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed after detaching the substrate guardrail.
This commit is contained in:
Adam Moussa 2026-09-02 17:38:48 -04:00
parent 954b521ac7
commit 21761c020c
No known key found for this signature in database

View file

@ -202,9 +202,11 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
"iam:GetRole",
"iam:GetRolePolicy",
"iam:ListAttachedRolePolicies",
"iam:ListInstanceProfilesForRole",
"iam:ListPolicies",
"iam:ListPolicyVersions",
"iam:ListRolePolicies",
"iam:ListRoleTags",
"iam:ListRoles",
]
resources = ["*"]