diff --git a/iam/create_role_to_assume_cfn.yaml b/iam/create_role_to_assume_cfn.yaml index 6414f810..99e0a767 100644 --- a/iam/create_role_to_assume_cfn.yaml +++ b/iam/create_role_to_assume_cfn.yaml @@ -63,4 +63,6 @@ Resources: - 'support:Describe*' - 'tag:GetTagKeys' - 'lambda:GetFunction' + - 'glue:GetConnections', + - 's3:GetAccountPublicAccessBlock' Resource: '*' diff --git a/iam/prowler-additions-policy.json b/iam/prowler-additions-policy.json index 33eacc35..441104ff 100644 --- a/iam/prowler-additions-policy.json +++ b/iam/prowler-additions-policy.json @@ -10,7 +10,9 @@ "ecr:Describe*", "support:Describe*", "tag:GetTagKeys", - "lambda:GetFunction" + "lambda:GetFunction", + "glue:GetConnections", + "s3:GetAccountPublicAccessBlock" ], "Resource": "*", "Effect": "Allow",