Update permissions to support Terraform v13

Terraform v13 requires some addition permission to be added. See: hashicorp/terraform-provider-aws#16755 Without the additional permissions the tdr-aws-accounts Terraform throws errors
nationalarchives · Jun 4, 2021 · f2723c6 · f2723c6
1 parent 3ee56a4
commit f2723c6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/modules/environment-roles/templates/shared_terraform_policy_3.json.tpl b/modules/environment-roles/templates/shared_terraform_policy_3.json.tpl
@@ -71,6 +71,7 @@
         "cloudtrail:DeleteTrail",
         "cloudtrail:DescribeTrails",
         "cloudtrail:GetEventSelectors",
+        "cloudtrail:GetInsightSelectors",
         "cloudtrail:GetTrail",
         "cloudtrail:GetTrailStatus",
         "cloudtrail:ListTags",
@@ -105,7 +106,9 @@
         "lambda:CreateFunction",
         "lambda:DeleteFunction",
         "lambda:GetAlias",
+        "lambda:GetCodeSigningConfig",
         "lambda:GetFunction",
+        "lambda:GetFunctionCodeSigningConfig",
         "lambda:GetFunctionConcurrency",
         "lambda:GetFunctionConfiguration",
         "lambda:GetFunctionEventInvokeConfig",