ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(iam): add new permissions (#2339)

Browse Source
This commit is contained in:
Sergio Garcia
2023-05-11 11:35:32 +02:00
committed by GitHub
parent 9943643958
commit 84b4139052
1 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
permissions/prowler-additions-policy.json
View File

@@ -6,28 +6,33 @@
"account:Get*", "account:Get*",
"appstream:Describe*", "appstream:Describe*",
"appstream:List*", "appstream:List*",
"backup:List*",
"cloudtrail:GetInsightSelectors",
"codeartifact:List*", "codeartifact:List*",
"codebuild:BatchGet*", "codebuild:BatchGet*",
"ds:Describe*", "drs:Describe*",
"ds:Get*", "ds:Get*",
"ds:Describe*",
"ds:List*", "ds:List*",
"ec2:GetEbsEncryptionByDefault", "ec2:GetEbsEncryptionByDefault",
"ecr:Describe*", "ecr:Describe*",
"ecr:GetRegistryScanningConfiguration",
"elasticfilesystem:DescribeBackupPolicy", "elasticfilesystem:DescribeBackupPolicy",
"glue:GetConnections", "glue:GetConnections",
"glue:GetSecurityConfiguration*", "glue:GetSecurityConfiguration*",
"glue:SearchTables", "glue:SearchTables",
"lambda:GetFunction*", "lambda:GetFunction*",
"logs:FilterLogEvents",
"macie2:GetMacieSession", "macie2:GetMacieSession",
"s3:GetAccountPublicAccessBlock", "s3:GetAccountPublicAccessBlock",
"shield:DescribeProtection", "shield:DescribeProtection",
"shield:GetSubscriptionState", "shield:GetSubscriptionState",
"securityhub:BatchImportFindings",
"securityhub:GetFindings",
"ssm:GetDocument", "ssm:GetDocument",
"ssm-incidents:List*",
"support:Describe*", "support:Describe*",
"tag:GetTagKeys", "tag:GetTagKeys"
"organizations:DescribeOrganization",
"organizations:ListPolicies*",
"organizations:DescribePolicy"
], ],
"Resource": "*", "Resource": "*",
"Effect": "Allow", "Effect": "Allow",
@@ -39,7 +44,8 @@
"apigateway:GET" "apigateway:GET"
], ],
"Resource": [ "Resource": [
"arn:aws:apigateway:*::/restapis/*" "arn:aws:apigateway:*::/restapis/*",
"arn:aws:apigateway:*::/apis/*"
] ]
} }
] ]