summaryrefslogtreecommitdiff
path: root/hacking
diff options
context:
space:
mode:
Diffstat (limited to 'hacking')
-rw-r--r--hacking/aws_config/testing_policies/security-policy.json3
1 files changed, 3 insertions, 0 deletions
diff --git a/hacking/aws_config/testing_policies/security-policy.json b/hacking/aws_config/testing_policies/security-policy.json
index f0d0768a7a..adacf0040c 100644
--- a/hacking/aws_config/testing_policies/security-policy.json
+++ b/hacking/aws_config/testing_policies/security-policy.json
@@ -20,6 +20,7 @@
"iam:ListPolicies",
"iam:ListRoles",
"iam:ListRolePolicies",
+ "iam:ListRoleTags",
"iam:ListUsers",
"iam:ListAccountAliases"
],
@@ -50,6 +51,8 @@
"iam:PassRole",
"iam:PutRolePolicy",
"iam:PutRolePermissionsBoundary",
+ "iam:TagRole",
+ "iam:UntagRole",
"iam:UpdateAssumeRolePolicy",
"iam:UpdateRole",
"iam:UpdateRoleDescription",