Merge pull request #7 from rhythmictech/updated-perms

updated iam policy to match current datadog recommendations
rhythmictech · Aug 25, 2023 · b5b670f · b5b670f
2 parents a17c24a + f88c06f
commit b5b670f
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 6 deletions.
diff --git a/.terraform-version b/.terraform-version
@@ -1 +1 @@
-latest:^1.1
+latest:^1.3
diff --git a/iam-fullperms.json b/iam-fullperms.json
@@ -4,6 +4,7 @@
       "Action": [
         "apigateway:GET",
         "autoscaling:Describe*",
+        "backup:List*",
         "budgets:ViewBudget",
         "cloudfront:GetDistributionConfig",
         "cloudfront:ListDistributions",
@@ -23,15 +24,16 @@
         "ecs:List*",
         "elasticache:Describe*",
         "elasticache:List*",
-        "elasticfilesystem:DescribeAccessPoints",
         "elasticfilesystem:DescribeFileSystems",
         "elasticfilesystem:DescribeTags",
+        "elasticfilesystem:DescribeAccessPoints",
         "elasticloadbalancing:Describe*",
         "elasticmapreduce:List*",
         "elasticmapreduce:Describe*",
         "es:ListTags",
         "es:ListDomainNames",
         "es:DescribeElasticsearchDomains",
+        "events:CreateEventBus",
         "fsx:DescribeFileSystems",
         "fsx:ListTagsForResource",
         "health:DescribeEvents",
@@ -41,11 +43,15 @@
         "kinesis:Describe*",
         "lambda:GetPolicy",
         "lambda:List*",
-        "logs:TestMetricFilter",
-        "logs:PutSubscriptionFilter",
         "logs:DeleteSubscriptionFilter",
+        "logs:DescribeLogGroups",
+        "logs:DescribeLogStreams",
         "logs:DescribeSubscriptionFilters",
-        "organizations:DescribeOrganization",
+        "logs:FilterLogEvents",
+        "logs:PutSubscriptionFilter",
+        "logs:TestMetricFilter",
+        "organizations:Describe*",
+        "organizations:List*",
         "rds:Describe*",
         "rds:List*",
         "redshift:DescribeClusters",
@@ -63,7 +69,8 @@
         "sqs:ListQueues",
         "states:ListStateMachines",
         "states:DescribeStateMachine",
-        "support:*",
+        "support:DescribeTrustedAdvisor*",
+        "support:RefreshTrustedAdvisorCheck",
         "tag:GetResources",
         "tag:GetTagKeys",
         "tag:GetTagValues",