update

formkiq · Jun 29, 2024 · e52042f · e52042f
1 parent 9361a4d
commit e52042f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml b/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml
@@ -308,6 +308,14 @@ Resources:
               - cognito-idp:ListUsersInGroup
               - cognito-idp:CreateGroup
               - cognito-idp:DeleteGroup
+              - cognito-idp:AdminCreateUser
+              - cognito-idp:AdminDeleteUser
+              - cognito-idp:AdminAddUserToGroup
+              - cognito-idp:AdminDisableUser
+              - cognito-idp:AdminEnableUser
+              - cognito-idp:AdminRemoveUserFromGroup
+              - cognito-idp:AdminResetUserPassword
+              - cognito-idp:AdminGetUser
               Resource:
               - Fn::Sub: "arn:${Partition}:cognito-idp:${AWS::Region}:${AWS::AccountId}:userpool/${CognitoUserPool}"
             - Effect: Allow