Merge pull request #248 from openinfradev/release

main merge (20230818 )
openinfradev · Aug 18, 2023 · cc6e26c · cc6e26c
2 parents 56ff6e0 + c7b1c19
commit cc6e26c
Showing 1 changed file with 29 additions and 0 deletions.
diff --git a/cloud-accounts/aws-multi-tenancy-iam-resources.yaml b/cloud-accounts/aws-multi-tenancy-iam-resources.yaml
@@ -76,6 +76,35 @@ spec:
               - \"iam:CreateRole\"
               - \"iam:DeleteRole\"
               - \"cloudformation:*\"
+              - \"autoscaling:DescribeAccountLimits\"
+              - \"cloudformation:DescribeAccountLimits\"
+              - \"cloudwatch:DescribeAlarmsForMetric\"
+              - \"cloudwatch:DescribeAlarms\"
+              - \"cloudwatch:GetMetricData\"
+              - \"cloudwatch:GetMetricStatistics\"
+              - \"dynamodb:DescribeLimits\"
+              - \"elasticloadbalancing:DescribeAccountLimits\"
+              - \"iam:GetAccountSummary\"
+              - \"kinesis:DescribeLimits\"
+              - \"organizations:DescribeAccount\"
+              - \"organizations:DescribeOrganization\"
+              - \"organizations:ListAWSServiceAccessForOrganization\"
+              - \"rds:DescribeAccountAttributes\"
+              - \"route53:GetAccountLimit\"
+              - \"tag:GetTagKeys\"
+              - \"tag:GetTagValues\"
+              - \"servicequotas:GetAssociationForServiceQuotaTemplate\"
+              - \"servicequotas:GetAWSDefaultServiceQuota\"
+              - \"servicequotas:GetRequestedServiceQuotaChange\"
+              - \"servicequotas:GetServiceQuota\"
+              - \"servicequotas:GetServiceQuotaIncreaseRequestFromTemplate\"
+              - \"servicequotas:ListAWSDefaultServiceQuotas\"
+              - \"servicequotas:ListRequestedServiceQuotaChangeHistory\"
+              - \"servicequotas:ListRequestedServiceQuotaChangeHistoryByQuota\"
+              - \"servicequotas:ListServices\"
+              - \"servicequotas:ListServiceQuotas\"
+              - \"servicequotas:ListServiceQuotaIncreaseRequestsInTemplate\"
+              - \"servicequotas:ListTagsForResource\"
               Effect: \"Allow\"
               Resource:
               - \"*\"" | envsubst > bootstrap-manager-account.yaml