Added s3 and glue required permissions

2026-02-11 07:15:15 +00:00 · 2021-07-27 14:43:20 +02:00
parent 065483a8b6
commit c32fa9aa1f
2 changed files with 5 additions and 1 deletions
--- a/iam/create_role_to_assume_cfn.yaml
+++ b/iam/create_role_to_assume_cfn.yaml
@@ -63,4 +63,6 @@ Resources:
                - 'support:Describe*'
                - 'tag:GetTagKeys'
                - 'lambda:GetFunction'
+                - 'glue:GetConnections',
+                - 's3:GetAccountPublicAccessBlock'
              Resource: '*'
--- a/iam/prowler-additions-policy.json
+++ b/iam/prowler-additions-policy.json
@@ -10,7 +10,9 @@
                "ecr:Describe*",
                "support:Describe*",
                "tag:GetTagKeys",
-		"lambda:GetFunction"
+		        "lambda:GetFunction",
+                "glue:GetConnections",
+                "s3:GetAccountPublicAccessBlock"
            ],
            "Resource": "*",
            "Effect": "Allow",