add sso:ListPermissionSetsProvisionedToAccount to StatementForAWSIden…

…tityCenterAccess (#48496)
gravitational · Nov 6, 2024 · c6c62be · c6c62be
1 parent b0e1f9c
commit c6c62be
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/lib/cloud/aws/policy_statements.go b/lib/cloud/aws/policy_statements.go
@@ -457,6 +457,7 @@ func StatementForAWSIdentityCenterAccess() *Statement {
 			"sso:DescribePermissionSet",
 			"sso:ListPermissionSets",
 			"sso:ListAccountAssignmentsForPrincipal",
+			"sso:ListPermissionSetsProvisionedToAccount",
 
 			// CreateAndDeleteAccountAssignment
 			"sso:CreateAccountAssignment",

diff --git a/lib/integrations/awsoidc/testdata/TestConfigureIdPIAMWithPolicyPresetOutput.golden b/lib/integrations/awsoidc/testdata/TestConfigureIdPIAMWithPolicyPresetOutput.golden
@@ -79,6 +79,7 @@ AssignPolicy: {
             "sso:DescribePermissionSet",
             "sso:ListPermissionSets",
             "sso:ListAccountAssignmentsForPrincipal",
+            "sso:ListPermissionSetsProvisionedToAccount",
             "sso:CreateAccountAssignment",
             "sso:DescribeAccountAssignmentCreationStatus",
             "sso:DeleteAccountAssignment",