adam/sh-openswe-traces
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/sh-openswe-traces.git synced 2026-10-06 21:42:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(iam): add apply-role IAM list permissions (PLAT-146)

Browse source 
IamReadOnly omitted ListRoleTags and ListInstanceProfilesForRole needed to refresh imported roles after detaching the substrate guardrail.
This commit is contained in:
Adam Moussa 2026-09-02 17:38:42 -04:00
parent a84d3199c8
commit a7352b2fac
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
terraform/hcp_iam.tf
View file

@ -120,9 +120,11 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
"iam:GetRole", "iam:GetRole",
"iam:GetRolePolicy", "iam:GetRolePolicy",
"iam:ListAttachedRolePolicies", "iam:ListAttachedRolePolicies",
"iam:ListInstanceProfilesForRole",
"iam:ListPolicies", "iam:ListPolicies",
"iam:ListPolicyVersions", "iam:ListPolicyVersions",
"iam:ListRolePolicies", "iam:ListRolePolicies",
"iam:ListRoleTags",
"iam:ListRoles", "iam:ListRoles",
] ]
resources = ["*"] resources = ["*"]