From e52042fa3679394e36feecd4ee4262fd0c70361c Mon Sep 17 00:00:00 2001
From: Mike Friesen <mfriesen@gmail.com>
Date: Sat, 29 Jun 2024 17:53:18 -0500
Subject: [PATCH] update

---
 .../src/main/resources/cloudformation/api-lambda.yaml     | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml b/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml
index 41cfb6c98..59692347d 100644
--- a/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml
+++ b/lambda-api-graalvm/src/main/resources/cloudformation/api-lambda.yaml
@@ -308,6 +308,14 @@ Resources:
               - cognito-idp:ListUsersInGroup
               - cognito-idp:CreateGroup
               - cognito-idp:DeleteGroup
+              - cognito-idp:AdminCreateUser
+              - cognito-idp:AdminDeleteUser
+              - cognito-idp:AdminAddUserToGroup
+              - cognito-idp:AdminDisableUser
+              - cognito-idp:AdminEnableUser
+              - cognito-idp:AdminRemoveUserFromGroup
+              - cognito-idp:AdminResetUserPassword
+              - cognito-idp:AdminGetUser
               Resource:
               - Fn::Sub: "arn:${Partition}:cognito-idp:${AWS::Region}:${AWS::AccountId}:userpool/${CognitoUserPool}"
             - Effect: Allow