GetContactInformation perm added (#72)

draios · Jun 6, 2024 · 1d110e5 · 1d110e5
1 parent ff90b95
commit 1d110e5
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/modules/services/trust-relationship/main.tf b/modules/services/trust-relationship/main.tf
@@ -104,6 +104,20 @@ data "aws_iam_policy_document" "custom_resources_policy" {
       "*"
     ]
   }
+
+  statement {
+    sid = "AccessAccountContactInfo"
+
+    effect = "Allow"
+
+    actions = [
+      "account:GetContactInformation",
+    ]
+
+    resources = [
+      "*",
+    ]
+  }
 }
 
 #----------------------------------------------------------
@@ -175,6 +189,11 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Sid: "AccessAccountContactInfo"
+                Effect: "Allow"
+                Action:
+                  - "account:GetContactInformation"
+                Resource: "*"
 TEMPLATE
 }