adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-09-30 07:13:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(iam): allow ListPolicyTags on scoped IAM policy (PLAT-146)

Browse source 
tagged managed scoped IAM is refreshed with ListPolicyTags; apply IamReadOnly and plan-refresh omitted it.
This commit is contained in:
Adam Moussa 2026-09-02 18:01:10 -04:00
parent 6dd878e7f5
commit 058db53acd
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
terraform/hcp_iam.tf
View file

@ -199,6 +199,7 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
"iam:ListAttachedRolePolicies",
"iam:ListInstanceProfilesForRole",
"iam:ListPolicies",
"iam:ListPolicyTags",
"iam:ListPolicyVersions",
"iam:ListRolePolicies",
"iam:ListRoles",
@ -605,6 +606,7 @@ resource "aws_iam_role_policy" "hcptf_plan_refresh" {
Action = [
"iam:GetPolicy",
"iam:GetPolicyVersion",
"iam:ListPolicyTags",
]
Resource = "*"
Effect = "Allow"