fix: Allow TagUser to SelfManagement policy (#287)

BastienGenestal · web-flow · commit 87624b69f949 · 2022-10-12T08:02:10.000-04:00
diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf
@@ -39,6 +39,9 @@ data "aws_iam_policy_document" "iam_self_management" {
       "iam:UpdateUser",
       "iam:UploadSigningCertificate",
       "iam:UploadSSHPublicKey",
+      "iam:TagUser",
+      "iam:ListUserTags",
+      "iam:UntagUser",
     ]
 
     # Allow for both users with "path" and without it

Original file line number	Diff line number	Diff line change
`@@ -39,6 +39,9 @@ data "aws_iam_policy_document" "iam_self_management" {`
`39`	`39`	`"iam:UpdateUser",`
`40`	`40`	`"iam:UploadSigningCertificate",`
`41`	`41`	`"iam:UploadSSHPublicKey",`
	`42`	`+ "iam:TagUser",`
	`43`	`+ "iam:ListUserTags",`
	`44`	`+ "iam:UntagUser",`
`42`	`45`	`]`
`43`	`46`
`44`	`47`	`# Allow for both users with "path" and without it`