mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 06:45:08 +00:00
42 lines
977 B
JSON
42 lines
977 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"appstream:Describe*",
|
|
"codeartifact:List*",
|
|
"codebuild:BatchGet*",
|
|
"ds:Describe*",
|
|
"ds:Get*",
|
|
"ds:List*",
|
|
"ec2:GetEbsEncryptionByDefault",
|
|
"ecr:Describe*",
|
|
"elasticfilesystem:DescribeBackupPolicy",
|
|
"glue:GetConnections",
|
|
"glue:GetSecurityConfiguration*",
|
|
"glue:SearchTables",
|
|
"lambda:GetFunction*",
|
|
"macie2:GetMacieSession",
|
|
"s3:GetAccountPublicAccessBlock",
|
|
"shield:DescribeProtection",
|
|
"shield:GetSubscriptionState",
|
|
"ssm:GetDocument",
|
|
"support:Describe*",
|
|
"tag:GetTagKeys"
|
|
],
|
|
"Resource": "*",
|
|
"Effect": "Allow",
|
|
"Sid": "AllowMoreReadForProwler"
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"apigateway:GET"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:apigateway:*::/restapis/*"
|
|
]
|
|
}
|
|
]
|
|
}
|