upd: update policy IAM permissions file for 143,144,159, 462

epam · Sep 23, 2024 · e2e5450 · e2e5450
1 parent abfff80
commit e2e5450
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/terraform/ecc-aws-143-bucket_object-level_logging_for_write_enabled/iam/143-policy.json b/terraform/ecc-aws-143-bucket_object-level_logging_for_write_enabled/iam/143-policy.json
@@ -6,6 +6,7 @@
             "Action": [ 
                 "iam:ListAccountAliases",
                 "cloudtrail:DescribeTrails",
+                "cloudtrail:GetTrailStatus",
                 "cloudtrail:GetEventSelectors"
             ],
             "Resource": "*"

diff --git a/terraform/ecc-aws-144-bucket_object-level_logging_for_read_enabled/iam/144-policy.json b/terraform/ecc-aws-144-bucket_object-level_logging_for_read_enabled/iam/144-policy.json
@@ -6,7 +6,8 @@
             "Action": [ 
                 "iam:ListAccountAliases",
                 "cloudtrail:DescribeTrails",
-                "cloudtrail:GetEventSelectors"
+                "cloudtrail:GetEventSelectors",
+                "cloudtrail:GetTrailStatus"
             ],
             "Resource": "*"
         }

diff --git a/terraform/ecc-aws-159-rds_critical_cluster_events_notification_exists/iam/159-policy.json b/terraform/ecc-aws-159-rds_critical_cluster_events_notification_exists/iam/159-policy.json
@@ -4,10 +4,10 @@
         {
             "Effect": "Allow",
             "Action": [
+                "iam:ListAccountAliases",
                 "rds:DescribeEventSubscriptions",
-				"iam:ListAccountAliases",
-                "rds:DescribeDBInstances",
                 "sns:ListTopics",
+                "rds:DescribeDBClusters",
                 "sns:GetTopicAttributes"
             ],
             "Resource": "*"

diff --git a/terraform/ecc-aws-462-lambda_concurrency_enabled/iam/462-policy.json b/terraform/ecc-aws-462-lambda_concurrency_enabled/iam/462-policy.json
@@ -7,8 +7,6 @@
             "Action": [
                 "tag:GetResources",
                 "lambda:ListFunctions",
-                "lambda:GetFunctionConcurrency",
-                "lambda:GetFunctionConfiguration",
                 "lambda:GetFunction"
             ],
             "Resource": "*"