chore(lwpreflight): fix permissions (#1772)

Author: PengyuanZhao

lwpreflight/aws/constants.go

@@ -39,6 +39,7 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"ec2:DescribeVpcClassicLinkDnsSupport",
 		"ec2:DescribeVpcs",
 		"ec2:DetachInternetGateway",
+		"ec2:DeleteNetworkAclEntry",
 		"ec2:DisassociateRouteTable",
 		"ec2:ModifyVpcAttribute",
 		"ec2:RevokeSecurityGroupEgress",
@@ -50,6 +51,7 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"ecs:DescribeTaskDefinition",
 		"ecs:PutClusterCapacityProviders",
 		"ecs:RegisterTaskDefinition",
+		"ecs:TagResource",
 		"events:DeleteRule",
 		"events:DescribeRule",
 		"events:ListTagsForResource",
@@ -78,6 +80,7 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"iam:ListUserPolicies",
 		"iam:PassRole",
 		"iam:PutRolePolicy",
+		"iam:TagPolicy",
 		"iam:TagRole",
 		"logs:CreateLogGroup",
 		"logs:DeleteLogGroup",
@@ -535,6 +538,7 @@ var RequiredPermissionsForOrg = map[IntegrationType][]string{
 		"secretsmanager:GetResourcePolicy",
 		"secretsmanager:GetSecretValue",
 		"secretsmanager:PutSecretValue",
+		"secretsmanager:TagResource",
 		"servicequotas:GetServiceQuota",
 	},
 	Config: {

lwpreflight/gcp/constants.go

@@ -28,6 +28,7 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"iam.serviceAccountKeys.get",
 		"iam.serviceAccountKeys.list",
 		"iam.serviceAccounts.create",
+		"iam.serviceAccounts.actAs",
 		"iam.serviceAccounts.delete",
 		"iam.serviceAccounts.get",
 		"iam.serviceAccounts.list",
@@ -126,10 +127,8 @@ var RequiredPermissions = map[IntegrationType][]string{
 		"iam.serviceAccounts.disable",
 		"iam.serviceAccounts.enable",
 		"iam.serviceAccounts.get",
-		"iam.serviceAccounts.get",
 		"iam.serviceAccounts.getIamPolicy",
 		"iam.serviceAccounts.list",
-		"iam.serviceAccounts.list",
 		"iam.serviceAccounts.setIamPolicy",
 		"iam.serviceAccounts.undelete",
 		"iam.serviceAccounts.update",
@@ -167,6 +166,7 @@ var RequiredPermissionsForOrg = map[IntegrationType][]string{
 		"iam.serviceAccountKeys.delete",
 		"iam.serviceAccountKeys.get",
 		"iam.serviceAccountKeys.list",
+		"iam.serviceAccounts.actAs",
 		"iam.serviceAccounts.create",
 		"iam.serviceAccounts.delete",
 		"iam.serviceAccounts.get",