feat: add list permissions sets permission (#393)

gcharest · web-flow · commit d2e75e158cb8 · 2025-12-19T13:27:40.000-05:00
diff --git a/terragrunt/org_account/roles/sre_bot.tf b/terragrunt/org_account/roles/sre_bot.tf
@@ -71,7 +71,8 @@ data "aws_iam_policy_document" "sre_bot_policy" {
     effect = "Allow"
     actions = [
       "sso:ListAccountAssignmentsForPrincipal",
-      "sso:CreateAccountAssignment"
+      "sso:CreateAccountAssignment",
+      "sso:ListPermissionSets"
     ]
     resources = ["*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -71,7 +71,8 @@ data "aws_iam_policy_document" "sre_bot_policy" {`
`71`	`71`	`effect = "Allow"`
`72`	`72`	`actions = [`
`73`	`73`	`"sso:ListAccountAssignmentsForPrincipal",`
`74`		`- "sso:CreateAccountAssignment"`
	`74`	`+ "sso:CreateAccountAssignment",`
	`75`	`+ "sso:ListPermissionSets"`
`75`	`76`	`]`
`76`	`77`	`resources = ["*"]`
`77`	`78`	`}`