chore: add missing permissions for gke and eks auditlogs preflight check (#1795)

* chore: add missing permissions for gke auditlog preflight check

* chore: add missing permissions for EKS Audit log

Author: lokesh-vadlamudi

lwpreflight/aws/constants.go

@@ -913,6 +913,12 @@ var RequiredPermissionsForOrg = map[IntegrationType][]string{
 	},
 	EksAuditLog: {
 		"ec2:DescribeRegions",
+		"organizations:DescribeAccount",
+		"organizations:DescribeOrganization",
+		"organizations:ListAccounts",
+		"organizations:ListAWSServiceAccessForOrganization",
+		"organizations:ListOrganizationalUnitsForParent",
+		"organizations:ListRoots",
 		"s3:CreateBucket",
 		"s3:DeleteBucket",
 		"s3:ListBucket",

lwpreflight/gcp/constants.go

@@ -153,12 +153,22 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"serviceusage.services.use",
 	},
 	GkeAuditLog: {
+		"cloudscheduler.locations.list",
+		"iam.roles.create",
+		"iam.roles.delete",
+		"iam.roles.get",
+		"iam.roles.list",
+		"iam.roles.undelete",
+		"iam.roles.update",
 		"iam.serviceAccountKeys.create",
 		"iam.serviceAccountKeys.delete",
 		"iam.serviceAccountKeys.get",
 		"iam.serviceAccounts.create",
 		"iam.serviceAccounts.delete",
 		"iam.serviceAccounts.get",
+		"iam.serviceAccounts.getIamPolicy",
+		"iam.serviceAccounts.setIamPolicy",
+		"iam.serviceAccounts.update",
 		"logging.sinks.create",
 		"logging.sinks.delete",
 		"logging.sinks.get",
@@ -407,15 +417,26 @@ var RequiredPermissionsForOrg = map[IntegrationType][]string{
 		"serviceusage.services.list",
 	},
 	GkeAuditLog: {
+		"cloudscheduler.locations.list",
+		"iam.roles.create",
+		"iam.roles.delete",
+		"iam.roles.get",
+		"iam.roles.list",
+		"iam.roles.undelete",
+		"iam.roles.update",
 		"iam.serviceAccountKeys.create",
 		"iam.serviceAccountKeys.delete",
 		"iam.serviceAccountKeys.get",
 		"iam.serviceAccounts.create",
 		"iam.serviceAccounts.delete",
 		"iam.serviceAccounts.get",
+		"iam.serviceAccounts.getIamPolicy",
+		"iam.serviceAccounts.setIamPolicy",
+		"iam.serviceAccounts.update",
 		"logging.sinks.create",
 		"logging.sinks.delete",
 		"logging.sinks.get",
+		"orgpolicy.policy.get",
 		"pubsub.subscriptions.consume",
 		"pubsub.subscriptions.create",
 		"pubsub.subscriptions.delete",
@@ -433,6 +454,8 @@ var RequiredPermissionsForOrg = map[IntegrationType][]string{
 		"pubsub.topics.publish",
 		"pubsub.topics.setIamPolicy",
 		"pubsub.topics.update",
+		"resourcemanager.organizations.getIamPolicy",
+		"resourcemanager.organizations.setIamPolicy",
 		"resourcemanager.projects.get",
 		"resourcemanager.projects.getIamPolicy",
 		"resourcemanager.projects.setIamPolicy",