From 7ec97e09e594587314e21bf640fc67d4c68eaa77 Mon Sep 17 00:00:00 2001
From: Bartek Gola <49911954+bgola-signalfx@users.noreply.github.com>
Date: Tue, 17 Sep 2024 17:36:19 +0200
Subject: [PATCH] Add extra AWS tags related permissions for
 AWS/NetworkFirewall

---
 gdi/get-data-in/connect/aws/aws-prereqs.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/gdi/get-data-in/connect/aws/aws-prereqs.rst b/gdi/get-data-in/connect/aws/aws-prereqs.rst
index f99e12a46..0e0ebffd0 100644
--- a/gdi/get-data-in/connect/aws/aws-prereqs.rst
+++ b/gdi/get-data-in/connect/aws/aws-prereqs.rst
@@ -260,6 +260,8 @@ These are these permissions to allow Splunk Observability Cloud to collect AWS t
 - ``"lambda:GetAlias"``
 - ``"lambda:ListFunctions"``
 - ``"lambda:ListTags"``
+- ``"network-firewall:ListFirewalls"``
+- ``"network-firewall:DescribeFirewall"``
 - ``"rds:DescribeDBClusters"``
 - ``"rds:DescribeDBInstances"``
 - ``"rds:ListTagsForResource"``
@@ -349,6 +351,8 @@ Add the ``"<service>:<permission>"`` pair relevant to each service in the ``Acti
           "logs:DescribeLogGroups",
           "logs:DescribeSubscriptionFilters",
           "logs:PutSubscriptionFilter",
+          "network-firewall:ListFirewalls",
+          "network-firewall:DescribeFirewall",
           "organizations:DescribeOrganization",
           "rds:DescribeDBInstances",
           "rds:DescribeDBClusters",