Some permissions to check roles

fcracker79 · fcracker79 · commit 10ff2bd77fab · 2025-12-17T08:26:26.000+01:00
diff --git a/modules/response_actions.cft.yaml b/modules/response_actions.cft.yaml
@@ -265,6 +265,9 @@ Resources:
           - Effect: Allow
             Action:
             - iam:GetRole
+            - iam:GetRolePolicy
+            - iam:ListRolePolicies
+            - iam:ListAttachedRolePolicies
             Resource:
             - !Sub "arn:${Partition}:iam::${AWS::AccountId}:role/sysdig-secure-ra-${NameSuffix}-*"
       Tags:
