mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-11 07:15:15 +00:00
47 lines
1.1 KiB
JSON
47 lines
1.1 KiB
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"account:Get*",
|
|
"appstream:Describe*",
|
|
"appstream:List*",
|
|
"codeartifact:List*",
|
|
"codebuild:BatchGet*",
|
|
"ds:Describe*",
|
|
"ds:Get*",
|
|
"ds:List*",
|
|
"ec2:GetEbsEncryptionByDefault",
|
|
"ecr:Describe*",
|
|
"elasticfilesystem:DescribeBackupPolicy",
|
|
"glue:GetConnections",
|
|
"glue:GetSecurityConfiguration*",
|
|
"glue:SearchTables",
|
|
"lambda:GetFunction*",
|
|
"macie2:GetMacieSession",
|
|
"s3:GetAccountPublicAccessBlock",
|
|
"shield:DescribeProtection",
|
|
"shield:GetSubscriptionState",
|
|
"ssm:GetDocument",
|
|
"support:Describe*",
|
|
"tag:GetTagKeys",
|
|
"organizations:DescribeOrganization",
|
|
"organizations:ListPolicies*",
|
|
"organizations:DescribePolicy"
|
|
],
|
|
"Resource": "*",
|
|
"Effect": "Allow",
|
|
"Sid": "AllowMoreReadForProwler"
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"apigateway:GET"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:apigateway:*::/restapis/*"
|
|
]
|
|
}
|
|
]
|
|
}
|