diff --git a/README.md b/README.md index 5f3805e..e58f159 100644 --- a/README.md +++ b/README.md @@ -192,3 +192,6 @@ The audit policy is comprised of the following permissions: | | aps:DescribeRuleGroupsNamespace | | | APPSTREAM | appstream:Describe* | | | | appstream:List* | | +| PERSONALIZE | personalize:Describe* | | +| | personalize:List* | | +| | personalize:GetSolutionMetrics | | diff --git a/main.tf b/main.tf index 32a186f..bd1e366 100644 --- a/main.tf +++ b/main.tf @@ -270,6 +270,15 @@ data "aws_iam_policy_document" "lacework_audit_policy" { ] resources = ["*"] } + + statement { + sid = "PERSONALIZE" + actions = ["personalize:Describe*", + "personalize:List*", + "personalize:GetSolutionMetrics", + ] + resources = ["*"] + } } resource "aws_iam_policy" "lacework_audit_policy" {