Adding necessary permissions for CFT aws lambda scanning

sysdiglabs · Apr 29, 2024 · 1bb20a5 · 1bb20a5
1 parent 20f2d71
commit 1bb20a5
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/templates_cspm/CloudAgentlessRole.yaml b/templates_cspm/CloudAgentlessRole.yaml
@@ -65,6 +65,9 @@ Resources:
               - Effect: "Allow"
                 Action: "macie2:ListClassificationJobs"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "lambda:GetRuntimeManagementConfig"
+                Resource: "*"
 
 Outputs:
   RoleARN:

diff --git a/templates_cspm/OrgCloudAgentlessRole.yaml b/templates_cspm/OrgCloudAgentlessRole.yaml
@@ -67,6 +67,9 @@ Resources:
               - Effect: "Allow"
                 Action: "macie2:ListClassificationJobs"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "lambda:GetRuntimeManagementConfig"
+                Resource: "*"
   RoleStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties:
@@ -138,3 +141,6 @@ Resources:
                       - Effect: "Allow"
                         Action: "macie2:ListClassificationJobs"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "lambda:GetRuntimeManagementConfig"
+                        Resource: "*"