fix(modules): stackset exec role perms (#129)

sysdiglabs · Sep 6, 2024 · 2edb270 · 2edb270
1 parent 7bccfe6
commit 2edb270
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/modules/log_ingestion.events.cft.yaml b/modules/log_ingestion.events.cft.yaml
@@ -136,6 +136,7 @@ Resources:
           - sts:AssumeRole
       ManagedPolicyArns:
       - arn:aws:iam::aws:policy/AmazonEventBridgeFullAccess
+      - arn:aws:iam::aws:policy/AWSCloudFormationFullAccess
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:

diff --git a/modules/volume_access.cft.yaml b/modules/volume_access.cft.yaml
@@ -185,6 +185,7 @@ Resources:
           - sts:AssumeRole
       ManagedPolicyArns:
       - arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser
+      - arn:aws:iam::aws:policy/AWSCloudFormationFullAccess
   ScanningKmsKeyStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties: