2.183.0

root · root · commit c783fc59567c · 2024-09-25T07:46:21.000Z
diff --git a/cross-account/CrossAccountPolicy.yaml b/cross-account/CrossAccountPolicy.yaml
@@ -15,6 +15,12 @@ Statement:
   Condition:
     StringLike:
       aws:ResourceTag/Name: CadoResponse*
+- Sid: RequiredToCheckPolicy
+  Action:
+  - iam:GetPolicy
+  - iam:GetPolicyVersion
+  Resource: arn:aws:iam::*:policy/*CadoResponse*
+  Effect: Allow
 - Sid: RequiredForMemoryForensics
   Effect: Allow
   Action:
