odin-266: GetAccountAlias is a supportapp permission .. not iam

matt-mercer · matt-mercer · commit aaccc2640aa6 · 2025-08-21T12:14:44.000+01:00
diff --git a/iam.tf b/iam.tf
@@ -38,7 +38,7 @@ data "aws_iam_policy_document" "this" {
       "storagegateway:ListGateways",
       "storagegateway:ListTagsForResource",
       "iam:ListAccountAliases",
-      "iam:GetAccountAlias",
+      "supportapp:GetAccountAlias",
       "sts:GetCallerIdentity"
     ]
     resources = [

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ data "aws_iam_policy_document" "this" {`
`38`	`38`	`"storagegateway:ListGateways",`
`39`	`39`	`"storagegateway:ListTagsForResource",`
`40`	`40`	`"iam:ListAccountAliases",`
`41`		`- "iam:GetAccountAlias",`
	`41`	`+ "supportapp:GetAccountAlias",`
`42`	`42`	`"sts:GetCallerIdentity"`
`43`	`43`	`]`
`44`	`44`	`resources = [`