fix(LINK-2638): Add permission for efs ListTagsForResource (#93)

* add permission for efs list tags * addPermission
lacework · Feb 23, 2024 · c5cf5c8 · c5cf5c8
1 parent 9e0bb5b
commit c5cf5c8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -87,6 +87,7 @@ The audit policy is comprised of the following permissions:
 |                            | elasticfilesystem:DescribeAccountPreferences            |           |
 |                            | elasticfilesystem:DescribeBackupPolicy                  |           |
 |                            | elasticfilesystem:DescribeReplicationConfigurations     |           |
+|                            | elasticfilesystem:ListTagsForResource                   |           |
 | EMR                        | elasticmapreduce:ListBootstrapActions                   | *         |
 |                            | elasticmapreduce:ListInstanceFleets                     |           |
 |                            | elasticmapreduce:ListInstanceGroups                     |           |

diff --git a/main.tf b/main.tf
@@ -55,6 +55,7 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
       "elasticfilesystem:DescribeAccessPoints",
       "elasticfilesystem:DescribeAccountPreferences",
       "elasticfilesystem:DescribeBackupPolicy",
+      "elasticfilesystem:ListTagsForResource",
     "elasticfilesystem:DescribeReplicationConfigurations"]
     resources = ["*"]
   }