feat: add kinesisanalytics permissions

Signed-off-by: ljohnny <[email protected]>
lacework · Dec 12, 2024 · ebdba64 · ebdba64
1 parent 0408bda
commit ebdba64
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -177,4 +177,8 @@ The audit policy is comprised of the following permissions:
 |                            | compute-optimizer:GetEnrollmentStatusesForOrganization  |           |
 |                            | compute-optimizer:GetLambdaFunctionRecommendations      |           |
 |                            | compute-optimizer:GetRecommendationPreferences          |           |
-|                            | compute-optimizer:GetRecommendationSummaries            |           |
+|                            | compute-optimizer:GetRecommendationSummaries            |           |
+| KINESISANALYTICS           | kinesisanalytics:ListApplicationSnapshots               |           |
+|                            | kinesisanalytics:ListApplicationVersions                |           |
+|                            | kinesisanalytics:DescribeApplicationVersion             |           |
+|                            | kinesisanalytics:DescribeApplication                    |           |
diff --git a/main.tf b/main.tf
@@ -238,6 +238,16 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
     ]
     resources = ["*"]
   }
+
+  statement {
+    sid = "KINESISANALYTICS"
+    actions = ["kinesisanalytics:ListApplicationSnapshots",
+      "kinesisanalytics:ListApplicationVersions",
+      "kinesisanalytics:DescribeApplicationVersion",
+      "kinesisanalytics:DescribeApplication",
+    ]
+    resources = ["*"]
+  }
 }
 
 resource "aws_iam_policy" "lacework_audit_policy" {