SSPROD-60803 - Add iam:ListAccountAliases permission for account alias retrieval

ivanbesinovic-sysdig · ivanbesinovic-sysdig · commit b3ae06041b5c · 2025-10-09T09:45:05.000+02:00
diff --git a/modules/onboarding/main.tf b/modules/onboarding/main.tf
@@ -65,6 +65,7 @@ resource "aws_iam_role_policy" "onboarding_role_policy" {
         Action = [
           "account:Get*",
           "account:List*",
+          "iam:ListAccountAliases",
         ]
         Effect   = "Allow"
         Resource = "*"
@@ -107,4 +108,9 @@ resource "sysdig_secure_cloud_auth_account" "cloud_auth_account" {
       feature
     ]
   }
+
+  depends_on = [
+    aws_iam_role_policy.onboarding_role_policy,
+    aws_cloudformation_stack_set_instance.stackset_instance
+  ]
 }

Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,7 @@ resource "aws_iam_role_policy" "onboarding_role_policy" {`
`65`	`65`	`Action = [`
`66`	`66`	`"account:Get*",`
`67`	`67`	`"account:List*",`
	`68`	`+ "iam:ListAccountAliases",`
`68`	`69`	`]`
`69`	`70`	`Effect = "Allow"`
`70`	`71`	`Resource = "*"`
`@@ -107,4 +108,9 @@ resource "sysdig_secure_cloud_auth_account" "cloud_auth_account" {`
`107`	`108`	`feature`
`108`	`109`	`]`
`109`	`110`	`}`
	`111`	`+`
	`112`	`+ depends_on = [`
	`113`	`+ aws_iam_role_policy.onboarding_role_policy,`
	`114`	`+ aws_cloudformation_stack_set_instance.stackset_instance`
	`115`	`+ ]`
`110`	`116`	`}`