Add all backup service role policy arns to iam:AttachRolePolicy condi…

…tions (#289)
mattclay · Aug 14, 2023 · ad89114 · ad89114
1 parent 0f4ce9d
commit ad89114
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/aws/policy/security-services.yaml b/aws/policy/security-services.yaml
@@ -33,6 +33,9 @@ Statement:
           - 'arn:aws:iam::aws:policy/service-role/AWSServiceRoleForVPCTransitGateway'
           - 'arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy'
           - 'arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForBackup'
+          - 'arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForRestores'
+          - 'arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Backup'
+          - 'arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Restore'
 
   - Sid: AllowRegionalUnrestrictedResourceActionsWhichIncurNoFees
     Effect: Allow