feat(RAIN-90851): Add permission for two glue APIs (#84)

* Add glue permission * addAnotherAPI * addGlue * resolve one error
lacework · Nov 15, 2023 · 601e098 · 601e098
1 parent 3e5a30d
commit 601e098
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -135,5 +135,8 @@ The audit policy is comprised of the following permissions:
 |                            | apigatewayv2:GetRouteResponses                          |           |
 |                            | apigatewayv2:GetStages                                  |           |
 |                            | apigatewayv2:GetVpcLinks                                |           |
+| GLUE                       | glue:ListWorkflows                                      | *         |
+|                            | glue:BatchGetWorkflows                                  |           |
+|                            | glue:GetTags                                            |           |
 | CODEBUILD                  | codebuild:ListBuilds                                    | *         |
-|                            | codebuild:BatchGetBuilds                                |           |
+|                            | codebuild:BatchGetBuilds                                |           |
diff --git a/main.tf b/main.tf
@@ -134,6 +134,13 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
     "apigatewayv2:GetVpcLinks"]
     resources = ["*"]
   }
+  statement {
+    sid = "GLUE"
+    actions = ["glue:ListWorkflows",
+      "glue:BatchGetWorkflows",
+      "glue:GetTags"]
+    resources = ["*"]
+  }
 
   statement {
     sid = "CODEBUILD"