fix: add all necessary permissions

fivexl · Feb 1, 2024 · 6d35a0c · 6d35a0c
1 parent a013477
commit 6d35a0c
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/slack_handler_lambda.tf b/slack_handler_lambda.tf
@@ -179,13 +179,21 @@ data "aws_iam_policy_document" "slack_handler" {
   statement {
     effect = "Allow"
     actions = [
-      "sso:ListTagsForResource",
       "sso:CreatePermissionSet",
+      "sso:ListTagsForResource",
+      "sso:TagResource",
+
       "sso:AttachManagedPolicyToPermissionSet",
+      "sso:ListManagedPoliciesInPermissionSet",
+
+      "sso:ListCustomerManagedPolicyReferencesInPermissionSet",
+      "sso:AttachCustomerManagedPolicyReferenceToPermissionSet",
+
       "sso:PutPermissionsBoundaryToPermissionSet",
+      "sso:GetPermissionsBoundaryForPermissionSet",
+
       "sso:PutInlinePolicyToPermissionSet",
       "sso:GetInlinePolicyForPermissionSet",
-      "sso:GetPermissionsBoundaryForPermissionSet",
     ]
     resources = ["*"]
   }