feat: Add BatchGet* to IAM read only policy (#540)

moleus · bryantbiggs · web-flow · commit d886f11d0aa0 · 2024-12-26T11:06:37.000-06:00
Co-authored-by: Bryant Biggs &lt;bryantbiggs@gmail.com&gt;
diff --git a/modules/iam-read-only-policy/main.tf b/modules/iam-read-only-policy/main.tf
@@ -25,6 +25,7 @@ data "aws_iam_policy_document" "allowed_services" {
       actions = [
         "${statement.value}:List*",
         "${statement.value}:Get*",
+        "${statement.value}:BatchGet*",
         "${statement.value}:Describe*",
         "${statement.value}:View*",
       ]

Original file line number	Diff line number	Diff line change
`@@ -25,6 +25,7 @@ data "aws_iam_policy_document" "allowed_services" {`
`25`	`25`	`actions = [`
`26`	`26`	`"${statement.value}:List*",`
`27`	`27`	`"${statement.value}:Get*",`
	`28`	`+ "${statement.value}:BatchGet*",`
`28`	`29`	`"${statement.value}:Describe*",`
`29`	`30`	`"${statement.value}:View*",`
`30`	`31`	`]`