upd: update policy IAM permissions file for 143,144,159

epam · Sep 22, 2024 · 2eb24e7 · 2eb24e7
1 parent abfff80
commit 2eb24e7
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/terraform/ecc-aws-143-bucket_object-level_logging_for_write_enabled/iam/143-policy.json b/terraform/ecc-aws-143-bucket_object-level_logging_for_write_enabled/iam/143-policy.json
@@ -6,6 +6,7 @@
             "Action": [ 
                 "iam:ListAccountAliases",
                 "cloudtrail:DescribeTrails",
+                "cloudtrail:GetTrailStatus",
                 "cloudtrail:GetEventSelectors"
             ],
             "Resource": "*"

diff --git a/terraform/ecc-aws-144-bucket_object-level_logging_for_read_enabled/iam/144-policy.json b/terraform/ecc-aws-144-bucket_object-level_logging_for_read_enabled/iam/144-policy.json
@@ -6,7 +6,8 @@
             "Action": [ 
                 "iam:ListAccountAliases",
                 "cloudtrail:DescribeTrails",
-                "cloudtrail:GetEventSelectors"
+                "cloudtrail:GetEventSelectors",
+                "cloudtrail:GetTrailStatus"
             ],
             "Resource": "*"
         }

diff --git a/terraform/ecc-aws-159-rds_critical_cluster_events_notification_exists/iam/159-policy.json b/terraform/ecc-aws-159-rds_critical_cluster_events_notification_exists/iam/159-policy.json
@@ -4,10 +4,10 @@
         {
             "Effect": "Allow",
             "Action": [
+                "iam:ListAccountAliases",
                 "rds:DescribeEventSubscriptions",
-				"iam:ListAccountAliases",
-                "rds:DescribeDBInstances",
                 "sns:ListTopics",
+                "rds:DescribeDBClusters",
                 "sns:GetTopicAttributes"
             ],
             "Resource": "*"