revert glacier

lacework · Dec 13, 2023 · 0853e77 · 0853e77
1 parent 2e01c62
commit 0853e77
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -101,6 +101,7 @@ The audit policy is comprised of the following permissions:
 | SSO                        | sso:DescribeAccountAssignmentDeletionStatus             | *         |
 |                            | sso:DescribeInstanceAccessControlAttributeConfiguration |           |
 |                            | sso:GetInlinePolicyForPermissionSet                     |           |
+| GLACIER                    | glacier:ListTagsForVault                                | *         |
 | APIGATEWAY                 | apigateway:GET                                          | arn:aws:apigateway:*::/apikeys/*         |      |
 | WAFREGIONAL                | waf-regional:ListRules                                  | *         |
 |                            | waf-regional:GetRule                                    |           |

diff --git a/main.tf b/main.tf
@@ -97,6 +97,12 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
     resources = ["arn:aws:apigateway:*::/apikeys/*"]
   }
 
+  statement {
+    sid = "GLACIER"
+    actions = ["glacier:ListTagsForVault"]
+    resources = ["*"]
+  }
+
   statement {
     sid = "WAFREGIONAL"
     actions = ["waf-regional:ListRules",