Add permissions for internal policy (#426)

atlassian-labs · Aug 21, 2024 · a6ba552 · a6ba552
1 parent 1410cc3
commit a6ba552
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/permissions/atlassian-policy.json b/permissions/atlassian-policy.json
@@ -26,12 +26,15 @@
         "iam:GetPolicyVersion",
         "iam:ListOpenIDConnectProviders",
         "iam:ListOpenIDConnectProviderTags"
+        "iam:ListEntitiesForPolicy",
+	"iam:ListRoleTags"
       ],
       "Resource": [
         "arn:aws:iam::123456789012:policy/*_crowdstrike_s3",
         "arn:aws:iam::123456789012:policy/*_crowdstrike_secret",
         "arn:aws:iam::123456789012:policy/*_LaaS-policy",
         "arn:aws:iam::123456789012:policy/*_Fleet-Enrollment",
+        "arn:aws:iam::585036043680:role/atlas-*",
         "arn:aws:iam::123456789012:oidc-provider/*"
       ]
     },
@@ -44,4 +47,4 @@
       "Resource": "*"
     }
   ]
-}
+}