mergeMain

lacework · Nov 15, 2023 · d0ae261 · d0ae261
2 parents e5e5219 + 3e5a30d
commit d0ae261
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -137,4 +137,6 @@ The audit policy is comprised of the following permissions:
 | | apigatewayv2:GetVpcLinks | |
 | GLUE | glue:ListWorkflows | * |
 | | glue:BatchGetWorkflows | |
-| | glue:GetTags | |
+| | glue:GetTags | |
+| CODEBUILD | codebuild:ListBuilds | * |
+| | codebuild:BatchGetBuilds | |
diff --git a/main.tf b/main.tf
@@ -138,11 +138,17 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
  sid = "GLUE"
  actions = ["glue:ListWorkflows",
  "glue:BatchGetWorkflows",
- "glue:GetTags"
+ "glue:GetTags"]
+ }
+
+ statement {
+ sid = "CODEBUILD"
+ actions = ["codebuild:ListBuilds",
+ "codebuild:BatchGetBuilds",
  ]
  resources = ["*"]
  }
-}
+
 
 resource "aws_iam_policy" "lacework_audit_policy" {
  count = var.use_existing_iam_role_policy ? 0 : 1