mirror of
https://github.com/Sea-Haven-Industries/procurement-ingest.git
synced 2026-10-06 20:21:57 +00:00
fix(iam): add apply-role IAM list permissions (PLAT-146)
IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed after detaching the substrate guardrail.
This commit is contained in:
parent
fa6bcc90cc
commit
6dd878e7f5
1 changed files with 2 additions and 0 deletions
|
|
@ -197,10 +197,12 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
|
||||||
"iam:GetRole",
|
"iam:GetRole",
|
||||||
"iam:GetRolePolicy",
|
"iam:GetRolePolicy",
|
||||||
"iam:ListAttachedRolePolicies",
|
"iam:ListAttachedRolePolicies",
|
||||||
|
"iam:ListInstanceProfilesForRole",
|
||||||
"iam:ListPolicies",
|
"iam:ListPolicies",
|
||||||
"iam:ListPolicyVersions",
|
"iam:ListPolicyVersions",
|
||||||
"iam:ListRolePolicies",
|
"iam:ListRolePolicies",
|
||||||
"iam:ListRoles",
|
"iam:ListRoles",
|
||||||
|
"iam:ListRoleTags",
|
||||||
]
|
]
|
||||||
resources = ["*"]
|
resources = ["*"]
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue