Merge 6dd878e7f5 into decfdea723

fix(iam): add apply-role IAM list permissions (PLAT-146)
IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed after detaching the substrate guardrail.
2026-10-07 16:08:54 +00:00 · 2026-09-02 21:39:32 +00:00 · 2026-09-02 17:39:00 -04:00
1 changed files with 2 additions and 0 deletions
--- a/terraform/hcp_iam.tf
+++ b/terraform/hcp_iam.tf
@ -197,10 +197,12 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
      "iam:GetRole",
      "iam:GetRolePolicy",
      "iam:ListAttachedRolePolicies",
+      "iam:ListInstanceProfilesForRole",
      "iam:ListPolicies",
      "iam:ListPolicyVersions",
      "iam:ListRolePolicies",
      "iam:ListRoles",
+      "iam:ListRoleTags",
    ]
    resources = ["*"]
  }
Author	SHA1	Message	Date
Adam Moussa	d7de2d4050	Merge `6dd878e7f5` into `decfdea723`	2026-09-02 21:39:32 +00:00
Adam Moussa	6dd878e7f5	fix(iam): add apply-role IAM list permissions (PLAT-146) IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed after detaching the substrate guardrail.	2026-09-02 17:39:00 -04:00