feat: Allow iam:PutRolePolicy and iam:DeleteRolePolicy in aws (#79)

streamnative · Apr 30, 2024 · 8740a56 · 8740a56
1 parent 4632366
commit 8740a56
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/modules/aws/files/management_role_iam_policy.json.tpl b/modules/aws/files/management_role_iam_policy.json.tpl
@@ -84,6 +84,8 @@
       "Action": [
         "iam:DeleteRole",
         "iam:DetachRolePolicy",
+        "iam:PutRolePolicy",
+        "iam:DeleteRolePolicy",
         "iam:PutRolePermissionsBoundary",
         "iam:SetDefaultPolicyVersion",
         "iam:UpdateAssumeRolePolicy",

diff --git a/modules/aws/files/permission_boundary_iam_policy.json.tpl b/modules/aws/files/permission_boundary_iam_policy.json.tpl
@@ -43,6 +43,7 @@
         "iam:DeleteServiceLinkedRole",
         "iam:DetachRolePolicy",
         "iam:PutRolePolicy",
+        "iam:DeleteRolePolicy",
         "iam:PutRolePermissionsBoundary",
         "iam:RemoveRoleFromInstanceProfile",
         "iam:SetDefaultPolicyVersion",