SSPROD-60803 - Add iam:ListAccountAliases permission for account alias retrieval

ivanbesinovic-sysdig · ivanbesinovic-sysdig · commit 206e715a4393 · 2025-10-06T16:44:37.000+02:00
diff --git a/modules/foundational.cft.yaml b/modules/foundational.cft.yaml
@@ -224,6 +224,7 @@ Resources:
             Action:
             - account:Get*
             - account:List*
+            - iam:ListAccountAliases
             Resource: '*'
   OrganizationStackSet:
     Type: AWS::CloudFormation::StackSet
@@ -388,6 +389,7 @@ Resources:
                     Action:
                     - account:Get*
                     - account:List*
+                    - iam:ListAccountAliases
                     Resource: '*'
 
 Outputs:
