SLK-103301 | Add required ec2 permission to CSPM policy

anat-port-aqua · anat-port-aqua · commit e0a15279f392 · 2025-10-08T12:08:51.000+01:00
Resolves: SLK-103301
diff --git a/modules/single/modules/lambda/main.tf b/modules/single/modules/lambda/main.tf
@@ -330,6 +330,7 @@ resource "aws_iam_role" "cspm_role" {
             "devops-guru:ListNotificationChannels",
             "ec2:GetEbsEncryptionByDefault",
             "ec2:GetEbsDefaultKmsKeyId",
+            "ec2:DescribeVpcEndpointServicePermissions",
             "organizations:ListAccounts",
             "kendra:ListIndices",
             "proton:ListEnvironmentTemplates",
