feat: Extend self-management policy to read account summary (iam-group-with-policies) (#462)

vutny · bryantbiggs · web-flow · commit 0bedaf4dc507 · 2024-03-02T20:25:18.000-05:00
Co-authored-by: Bryant Biggs &lt;bryantbiggs@gmail.com&gt;
diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf
@@ -18,7 +18,9 @@ data "aws_iam_policy_document" "iam_self_management" {
     effect = "Allow"
 
     actions = [
+      "iam:GetAccountSummary",
       "iam:GetAccountPasswordPolicy",
+      "iam:ListAccountAliases",
       "iam:ListVirtualMFADevices"
     ]
 

Original file line number	Diff line number	Diff line change
`@@ -18,7 +18,9 @@ data "aws_iam_policy_document" "iam_self_management" {`
`18`	`18`	`effect = "Allow"`
`19`	`19`
`20`	`20`	`actions = [`
	`21`	`+ "iam:GetAccountSummary",`
`21`	`22`	`"iam:GetAccountPasswordPolicy",`
	`23`	`+ "iam:ListAccountAliases",`
`22`	`24`	`"iam:ListVirtualMFADevices"`
`23`	`25`	`]`
`24`	`26`