Docs: update required policy for Access Graph (#43569)

gravitational · Jun 27, 2024 · 74c8b6b · 74c8b6b
1 parent 6938c60
commit 74c8b6b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/docs/pages/access-controls/access-graph/aws-sync.mdx b/docs/pages/access-controls/access-graph/aws-sync.mdx
@@ -142,6 +142,7 @@ The IAM policy includes the following directives:
         "eks:ListAccessEntries",
         "eks:ListAccessPolicies",
         "eks:ListAssociatedAccessPolicies",
+        "eks:DescribeAccessEntry",
 
         "rds:DescribeDBInstances",
         "rds:DescribeDBClusters",
@@ -176,7 +177,11 @@ The IAM policy includes the following directives:
         "iam:GetPolicyVersion",
         "iam:ListRolePolicies",
         "iam:ListAttachedRolePolicies",
-        "iam:GetRolePolicy"
+        "iam:GetRolePolicy",
+        "iam:ListSAMLProviders",
+        "iam:GetSAMLProvider",
+        "iam:ListOpenIDConnectProviders",
+        "iam:GetOpenIDConnectProvider"
       ],
       "Resource": "*"
     }