fix(iam): add apply-role IAM list permissions (PLAT-146)

IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed to refresh imported roles after detaching the substrate guardrail.
This commit is contained in:
Adam Moussa 2026-09-02 17:38:42 -04:00
parent a84d3199c8
commit a7352b2fac
No known key found for this signature in database

View file

@ -120,9 +120,11 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
"iam:GetRole",
"iam:GetRolePolicy",
"iam:ListAttachedRolePolicies",
"iam:ListInstanceProfilesForRole",
"iam:ListPolicies",
"iam:ListPolicyVersions",
"iam:ListRolePolicies",
"iam:ListRoleTags",
"iam:ListRoles",
]
resources = ["*"]