Add macie2:ListClassificationJobs permission

draios · Mar 8, 2024 · 334598a · 334598a
1 parent 8c58165
commit 334598a
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/modules/services/trust-relationship/main.tf b/modules/services/trust-relationship/main.tf
@@ -75,6 +75,20 @@ data "aws_iam_policy_document" "custom_resources_policy" {
       "arn:aws:waf-regional:*:*:rulegroup/*"
     ]
   }
+
+  statement {
+    sid = "ListJobsOnConsole"
+
+    effect = "Allow"
+
+    actions = [
+      "macie2:ListClassificationJobs",
+    ]
+
+    resources = [
+      "*",
+    ]
+  }
 }
 
 #----------------------------------------------------------
@@ -132,6 +146,10 @@ Resources:
                 Resource:
                   - "arn:aws:waf-regional:*:*:rule/*"
                   - "arn:aws:waf-regional:*:*:rulegroup/*"
+              - Sid: "ListJobsOnConsole"
+                Effect: "Allow"
+                Action: "macie2:ListClassificationJobs"
+                Resource: "*"
 TEMPLATE
 }