From 840f855d203433f3fd4e6b2bba77b0dd2e22c2e1 Mon Sep 17 00:00:00 2001
From: Ivan Besinovic <ivan.besinovic@sysdig.com>
Date: Mon, 6 Oct 2025 16:44:37 +0200
Subject: [PATCH] SSPROD-60803 - Add iam:ListAccountAliases permission for
 account alias retrieval

---
 modules/foundational.cft.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/foundational.cft.yaml b/modules/foundational.cft.yaml
index db2dc1a..4d0806a 100644
--- a/modules/foundational.cft.yaml
+++ b/modules/foundational.cft.yaml
@@ -224,6 +224,7 @@ Resources:
             Action:
             - account:Get*
             - account:List*
+            - iam:ListAccountAliases
             Resource: '*'
   OrganizationStackSet:
     Type: AWS::CloudFormation::StackSet