one resource in apigateway

lacework · Dec 13, 2023 · a4f583b · a4f583b
1 parent 6ea021d
commit a4f583b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -102,7 +102,7 @@ The audit policy is comprised of the following permissions:
 | | sso:DescribeInstanceAccessControlAttributeConfiguration | |
 | | sso:GetInlinePolicyForPermissionSet | |
 | GLACIER | glacier:ListTagsForVault | * |
-| APIGATEWAY | apigateway:GET | * |
+| APIGATEWAY | apigateway:GET | arn:aws:apigateway:*::/apikeys/* |
 | WAFREGIONAL | waf-regional:ListRules | * |
 | | waf-regional:GetRule | |
 | | waf-regional:ListRuleGroups | |

diff --git a/main.tf b/main.tf
@@ -94,15 +94,15 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
  statement {
  sid = "APIGATEWAY"
  actions = ["apigateway:GET"]
- resources = ["*"]
+ resources = ["arn:aws:apigateway:*::/apikeys/*"]
  }
 
  statement {
  sid = "GLACIER"
  actions = ["glacier:ListTagsForVault"]
  resources = ["*"]
  }
-
+ 
  statement {
  sid = "WAFREGIONAL"
  actions = ["waf-regional:ListRules",