mirror of
https://github.com/Sea-Haven-Industries/sh-openswe-traces.git
synced 2026-09-30 10:23:15 +00:00
fix(iam): add apply-role IAM list permissions (PLAT-146)
IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed to refresh imported roles after detaching the substrate guardrail.
This commit is contained in:
parent
a84d3199c8
commit
a7352b2fac
1 changed files with 2 additions and 0 deletions
|
|
@ -120,9 +120,11 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
|
|||
"iam:GetRole",
|
||||
"iam:GetRolePolicy",
|
||||
"iam:ListAttachedRolePolicies",
|
||||
"iam:ListInstanceProfilesForRole",
|
||||
"iam:ListPolicies",
|
||||
"iam:ListPolicyVersions",
|
||||
"iam:ListRolePolicies",
|
||||
"iam:ListRoleTags",
|
||||
"iam:ListRoles",
|
||||
]
|
||||
resources = ["*"]
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue