skip: Merge remote-tracking branch 'origin/update_iam_per_policy' int…

…o feature/policy_testing_v2
epam · Jun 26, 2024 · a0e14a4 · a0e14a4
2 parents 8703bc5 + 2b080c8
commit a0e14a4
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 12 deletions.
diff --git a/terraform/ecc-aws-108-cloudfront_distribution_access_logging/iam/108-policy.json b/terraform/ecc-aws-108-cloudfront_distribution_access_logging/iam/108-policy.json
@@ -1,12 +1,14 @@
 {
-    "Version": "2012-10-17",
-    "Statement": [
-        {
-            "Effect": "Allow",
-            "Action": [ 
-                "cloudfront:GetDistributionConfig"
-            ],
-            "Resource": "*"
-        }
-    ]
-}
+	"Version": "2012-10-17",
+	"Statement": [
+		{
+			"Effect": "Allow",
+			"Action": [
+				"cloudfront:ListDistributions",
+				"cloudfront:GetDistributionConfig",
+				"tag:GetResources"
+			],
+			"Resource": "*"
+		}
+	]
+}
diff --git a/...-aws-140-only_one_active_access_key_available_for_any_single_iam_user/iam/140-policy.json b/...-aws-140-only_one_active_access_key_available_for_any_single_iam_user/iam/140-policy.json
@@ -3,7 +3,8 @@
     "Statement": [
         {
             "Effect": "Allow",
-            "Action": [
+            "Action": [ 
+                "iam:ListAccessKeys",
                 "iam:GetUser",
                 "iam:ListAccessKeys"
             ],