Merge pull request #56 from moj-analytical-services/add-permission-at…

…hena-list_query_executions add athena:ListNamedQueries permission
moj-analytical-services · Jan 22, 2024 · dd27d4a · dd27d4a
2 parents 18af40c + 2eeed04
commit dd27d4a
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 0 deletions.
diff --git a/examples/iam_policy.json b/examples/iam_policy.json
@@ -68,6 +68,7 @@
                 "athena:GetQueryResultsStream",
                 "athena:GetWorkGroup",
                 "athena:ListNamedQueries",
+                "athena:ListQueryExecutions",
                 "athena:ListWorkGroups",
                 "athena:StartQueryExecution",
                 "athena:StopQueryExecution",

diff --git a/iam_builder/templates.py b/iam_builder/templates.py
@@ -194,6 +194,7 @@ def get_athena_read_access(dump_bucket: list) -> dict:
                     "athena:GetQueryResultsStream",
                     "athena:GetWorkGroup",
                     "athena:ListNamedQueries",
+                    "athena:ListQueryExecutions",
                     "athena:ListWorkGroups",
                     "athena:StartQueryExecution",
                     "athena:StopQueryExecution",

diff --git a/tests/expected_policy/all_config.json b/tests/expected_policy/all_config.json
@@ -68,6 +68,7 @@
                 "athena:GetQueryResultsStream",
                 "athena:GetWorkGroup",
                 "athena:ListNamedQueries",
+                "athena:ListQueryExecutions",
                 "athena:ListWorkGroups",
                 "athena:StartQueryExecution",
                 "athena:StopQueryExecution",

diff --git a/tests/expected_policy/athena_full_access.json b/tests/expected_policy/athena_full_access.json
@@ -68,6 +68,7 @@
                 "athena:GetQueryResultsStream",
                 "athena:GetWorkGroup",
                 "athena:ListNamedQueries",
+                "athena:ListQueryExecutions",
                 "athena:ListWorkGroups",
                 "athena:StartQueryExecution",
                 "athena:StopQueryExecution",

diff --git a/tests/expected_policy/athena_read_only.json b/tests/expected_policy/athena_read_only.json
@@ -68,6 +68,7 @@
                 "athena:GetQueryResultsStream",
                 "athena:GetWorkGroup",
                 "athena:ListNamedQueries",
+                "athena:ListQueryExecutions",
                 "athena:ListWorkGroups",
                 "athena:StartQueryExecution",
                 "athena:StopQueryExecution",

diff --git a/tests/expected_policy/athena_two_dumps.json b/tests/expected_policy/athena_two_dumps.json
@@ -70,6 +70,7 @@
                 "athena:GetQueryResultsStream",
                 "athena:GetWorkGroup",
                 "athena:ListNamedQueries",
+                "athena:ListQueryExecutions",
                 "athena:ListWorkGroups",
                 "athena:StartQueryExecution",
                 "athena:StopQueryExecution",