ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 06:45:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(IAM): add missing permissions for Prowler (#1731)

Browse Source 
Co-authored-by: sergargar <sergio@verica.io>
This commit is contained in:
Sergio Garcia
2023-01-18 11:45:37 +01:00
committed by GitHub
parent e3e3b3e279
commit 50070e8fe7
1 changed files with 19 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
permissions/prowler-additions-policy.json
View File

@@ -3,15 +3,22 @@
"Statement": [ "Statement": [
{ {
"Action": [ "Action": [
"ds:ListAuthorizedApplications", "appstream:Describe*",
"codeartifact:List*",
"codebuild:BatchGet*",
"ds:Describe*",
"ds:Get*",
"ds:List*",
"ec2:GetEbsEncryptionByDefault", "ec2:GetEbsEncryptionByDefault",
"ecr:Describe*", "ecr:Describe*",
"elasticfilesystem:DescribeBackupPolicy", "elasticfilesystem:DescribeBackupPolicy",
"glue:GetConnections", "glue:GetConnections",
"glue:GetSecurityConfiguration", "glue:GetSecurityConfiguration*",
"glue:SearchTables", "glue:SearchTables",
"lambda:GetFunction", "lambda:GetFunction*",
"macie2:GetMacieSession",
"s3:GetAccountPublicAccessBlock", "s3:GetAccountPublicAccessBlock",
"s3:GetPublicAccessBlock",
"shield:DescribeProtection", "shield:DescribeProtection",
"shield:GetSubscriptionState", "shield:GetSubscriptionState",
"ssm:GetDocument", "ssm:GetDocument",
@@ -21,6 +28,15 @@
"Resource": "*", "Resource": "*",
"Effect": "Allow", "Effect": "Allow",
"Sid": "AllowMoreReadForProwler" "Sid": "AllowMoreReadForProwler"
},
{
"Effect": "Allow",
"Action": [
"apigateway:GET"
],
"Resource": [
"arn:aws:apigateway:*::/restapis/*"
]
} }
] ]
} }