@@ -53,6 +53,118 @@ resource "aws_iam_policy" "github_actions_test" {
5353 Effect = " Allow"
5454 Resource = " *"
5555 },
56+ {
57+ Action = [
58+ " backup:TagResource" ,
59+ " backup:UntagResource" ,
60+ " cognito-identity:TagResource" ,
61+ " cognito-identity:UntagResource" ,
62+ " elasticloadbalancing:AddTags" ,
63+ " elasticloadbalancing:RemoveTags" ,
64+ " events:TagResource" ,
65+ " events:UntagResource" ,
66+ " iam:TagInstanceProfile" ,
67+ " iam:TagPolicy" ,
68+ " iam:TagRole" ,
69+ " iam:UntagInstanceProfile" ,
70+ " iam:UntagPolicy" ,
71+ " iam:UntagRole" ,
72+ " lambda:TagResource" ,
73+ " lambda:UntagResource" ,
74+ " logs:TagResource" ,
75+ " logs:UntagResource" ,
76+ " resource-groups:DeleteGroup" ,
77+ " resource-groups:GetGroup" ,
78+ " resource-groups:GetGroupConfiguration" ,
79+ " resource-groups:GetGroupQuery" ,
80+ " resource-groups:GetTags" ,
81+ " resource-groups:ListGroupResources" ,
82+ " resource-groups:Tag" ,
83+ " resource-groups:Untag" ,
84+ " resource-groups:UpdateGroup" ,
85+ " resource-groups:UpdateGroupQuery" ,
86+ " sns:TagResource" ,
87+ " sns:UntagResource"
88+ ]
89+ Effect = " Allow"
90+ Resource = [
91+ " *" ,
92+ " arn:aws:backup:*:694282683086:backup-plan:*" ,
93+ " arn:aws:backup:*:694282683086:backup-vault:*" ,
94+ " arn:aws:backup:*:694282683086:framework:*-*" ,
95+ " arn:aws:backup:*:694282683086:legal-hold:*" ,
96+ " arn:aws:backup:*:694282683086:report-plan:*-*" ,
97+ " arn:aws:backup:*:694282683086:restore-testing-plan:*-*" ,
98+ " arn:aws:cognito-identity:*:694282683086:identitypool/*" ,
99+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/app/*/*/*/*" ,
100+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/net/*/*/*/*" ,
101+ " arn:aws:elasticloadbalancing:*:694282683086:listener/app/*/*/*" ,
102+ " arn:aws:elasticloadbalancing:*:694282683086:listener/gwy/*/*/*" ,
103+ " arn:aws:elasticloadbalancing:*:694282683086:listener/net/*/*/*" ,
104+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/app/*/*" ,
105+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/gwy/*/*" ,
106+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/net/*/*" ,
107+ " arn:aws:elasticloadbalancing:*:694282683086:targetgroup/*/*" ,
108+ " arn:aws:elasticloadbalancing:*:694282683086:truststore/*/*" ,
109+ " arn:aws:events:*:694282683086:event-bus/*" ,
110+ " arn:aws:events:*:694282683086:rule/*/*" ,
111+ " arn:aws:iam::694282683086:instance-profile/*" ,
112+ " arn:aws:iam::694282683086:policy/*" ,
113+ " arn:aws:iam::694282683086:role/*" ,
114+ " arn:aws:lambda:*:694282683086:code-signing-config:*" ,
115+ " arn:aws:lambda:*:694282683086:event-source-mapping:*" ,
116+ " arn:aws:lambda:*:694282683086:function:*" ,
117+ " arn:aws:logs:*:694282683086:anomaly-detector:*" ,
118+ " arn:aws:logs:*:694282683086:delivery-destination:*" ,
119+ " arn:aws:logs:*:694282683086:delivery-source:*" ,
120+ " arn:aws:logs:*:694282683086:delivery:*" ,
121+ " arn:aws:logs:*:694282683086:destination:*" ,
122+ " arn:aws:logs:*:694282683086:log-group:*" ,
123+ " arn:aws:resource-groups:*:694282683086:group/*" ,
124+ " arn:aws:sns:*:694282683086:*"
125+ ]
126+ },
127+ {
128+ Action = [
129+ " elasticloadbalancing:AddTags" ,
130+ " elasticloadbalancing:RemoveTags"
131+ ]
132+ Effect = " Allow"
133+ Resource = [
134+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/app/*/*/*/*" ,
135+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/net/*/*/*/*" ,
136+ " arn:aws:elasticloadbalancing:*:694282683086:listener/app/*/*/*" ,
137+ " arn:aws:elasticloadbalancing:*:694282683086:listener/gwy/*/*/*" ,
138+ " arn:aws:elasticloadbalancing:*:694282683086:listener/net/*/*/*" ,
139+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/app/*/*" ,
140+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/gwy/*/*" ,
141+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/net/*/*" ,
142+ " arn:aws:elasticloadbalancing:*:694282683086:targetgroup/*/*" ,
143+ " arn:aws:elasticloadbalancing:*:694282683086:truststore/*/*"
144+ ]
145+ },
146+ {
147+ Action = [
148+ " elasticloadbalancing:AddTags" ,
149+ " elasticloadbalancing:RemoveTags" ,
150+ " events:TagResource" ,
151+ " events:UntagResource"
152+ ]
153+ Effect = " Allow"
154+ Resource = [
155+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/app/*/*/*/*" ,
156+ " arn:aws:elasticloadbalancing:*:694282683086:listener-rule/net/*/*/*/*" ,
157+ " arn:aws:elasticloadbalancing:*:694282683086:listener/app/*/*/*" ,
158+ " arn:aws:elasticloadbalancing:*:694282683086:listener/gwy/*/*/*" ,
159+ " arn:aws:elasticloadbalancing:*:694282683086:listener/net/*/*/*" ,
160+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/app/*/*" ,
161+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/gwy/*/*" ,
162+ " arn:aws:elasticloadbalancing:*:694282683086:loadbalancer/net/*/*" ,
163+ " arn:aws:elasticloadbalancing:*:694282683086:targetgroup/*/*" ,
164+ " arn:aws:elasticloadbalancing:*:694282683086:truststore/*/*" ,
165+ " arn:aws:events:*:694282683086:rule/*"
166+ ]
167+ },
56168 ]
57169 })
58170}
0 commit comments