Skip to content

Commit 63075d8

Browse files
authored
Merge pull request #23 from SPHTech-Platform/bugfix/permission-error
Add missing policies for CSPM - Suggested by Aquasec team
2 parents 619e8dc + 0e607cb commit 63075d8

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

data.tf

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -210,6 +210,20 @@ data "aws_iam_policy_document" "aqua_cspm_supplemental" {
210210
"frauddetector:GetKMSEncryptionKey",
211211
"imagebuilder:ListImagePipelines",
212212
"compute-optimizer:GetRecommendationSummaries",
213+
"cloudtrail:DescribeTrails",
214+
"rds:DescribeDBInstances",
215+
"ec2:DescribeSecurityGroups",
216+
"EC2:describeVpcs",
217+
"EC2:describeInstances",
218+
"ELB:describeLoadBalancers",
219+
"Lambda:listFunctions",
220+
"RDS:describeDBInstances",
221+
"Redshift:describeClusters",
222+
"EC2:describeVolumes",
223+
"KMS:describeKey",
224+
"KMS:listKeys",
225+
"STS:getCallerIdentity",
226+
"EC2:describeInstances",
213227
]
214228

215229
resources = [

0 commit comments

Comments
 (0)