fix(RAIN-93896): Add permisssions for three ApiGateway resources (#100)

* addApiGatewayPermission * fixSdkTypes * domainnames
lacework · Oct 8, 2024 · cef9183 · cef9183
1 parent 681ea7a
commit cef9183
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -98,7 +98,16 @@ data "aws_iam_policy_document" "lacework_audit_policy" {
   statement {
     sid = "APIGATEWAY"
     actions = ["apigateway:GET"]
-    resources = ["arn:aws:apigateway:*::/apikeys", "arn:aws:apigateway:*::/apikeys/*"]
+    resources = ["arn:aws:apigateway:*::/apikeys",
+    "arn:aws:apigateway:*::/apikeys/*",
+    "arn:aws:apigateway:*::/domainnames/*",
+    "arn:aws:apigateway:*::/domainnames/*/basepathmappings",
+    "arn:aws:apigateway:*::/domainnames/*/basepathmappings/*",
+    "arn:aws:apigateway:*::/usageplans",
+    "arn:aws:apigateway:*::/usageplans/*",
+    "arn:aws:apigateway:*::/sdktypes",
+    "arn:aws:apigateway:*::/sdktypes/*"
+    ]
   }
 
   statement {