Merge pull request #245 from cisagov/bugfix/add-cw-permission

Add `cloudwatch:TagResource` permission to ProvisionAssessment policy
cisagov · Aug 12, 2024 · 27398a5 · 27398a5
2 parents c050ca8 + dea5c12
commit 27398a5
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/provisionassessment_policy.tf b/provisionassessment_policy.tf
@@ -9,6 +9,7 @@ data "aws_iam_policy_document" "provisionassessment_policy_doc" {
       "cloudwatch:DeleteAlarms",
       "cloudwatch:ListTagsForResource",
       "cloudwatch:PutMetricAlarm",
+      "cloudwatch:TagResource",
     ]
 
     resources = [