chore: update documentation

someengineering · Oct 8, 2024 · 7f6317f · 7f6317f
1 parent 7c718d0
commit 7f6317f
Show file tree

Hide file tree

Showing 2 changed files with 59 additions and 0 deletions.
diff --git a/iam/aws/FixCollect.json b/iam/aws/FixCollect.json
@@ -14,6 +14,7 @@
         "athena:ListTagsForResource",
         "athena:ListWorkGroups",
         "autoscaling:DescribeAutoScalingGroups",
+        "backup:GetBackupVaultAccessPolicy",
         "backup:ListBackupJobs",
         "backup:ListBackupPlans",
         "backup:ListBackupVaults",
@@ -26,6 +27,28 @@
         "backup:ListRestoreJobs",
         "backup:ListRestoreTestingPlans",
         "backup:ListTags",
+        "bedrock-agent:GetAgent",
+        "bedrock-agent:GetAgentVersion",
+        "bedrock-agent:GetFlow",
+        "bedrock-agent:GetFlowVersion",
+        "bedrock-agent:GetKnowledgeBase",
+        "bedrock-agent:GetPrompt",
+        "bedrock-agent:ListAgents",
+        "bedrock-agent:ListFlows",
+        "bedrock-agent:ListKnowledgeBases",
+        "bedrock-agent:ListPrompts",
+        "bedrock-agent:ListTagsForResource",
+        "bedrock:GetCustomModel",
+        "bedrock:GetEvaluationJob",
+        "bedrock:GetGuardrail",
+        "bedrock:GetModelCustomizationJob",
+        "bedrock:ListCustomModels",
+        "bedrock:ListEvaluationJobs",
+        "bedrock:ListFoundationModels",
+        "bedrock:ListGuardrails",
+        "bedrock:ListModelCustomizationJobs",
+        "bedrock:ListProvisionedModelThroughputs",
+        "bedrock:ListTagsForResource",
         "cloudformation:DescribeStacks",
         "cloudformation:ListStackInstances",
         "cloudformation:ListStackResources",
@@ -51,6 +74,7 @@
         "cloudtrail:ListTags",
         "cloudtrail:ListTrails",
         "cloudwatch:DescribeAlarms",
+        "cloudwatch:DescribeResourcePolicies",
         "cloudwatch:GetMetricData",
         "cognito-idp:ListGroups",
         "cognito-idp:ListTagsForResource",
@@ -61,6 +85,7 @@
         "dynamodb:DescribeContinuousBackups",
         "dynamodb:DescribeGlobalTable",
         "dynamodb:DescribeTable",
+        "dynamodb:GetResourcePolicy",
         "dynamodb:ListGlobalTables",
         "dynamodb:ListTables",
         "dynamodb:ListTagsOfResource",
@@ -89,6 +114,7 @@
         "ecr-public:DescribeRepositories",
         "ecr:DescribeRepositories",
         "ecr:GetLifecyclePolicy",
+        "ecr:GetRepositoryPolicy",
         "ecs:DescribeCapacityProviders",
         "ecs:DescribeClusters",
         "ecs:DescribeContainerInstances",
@@ -135,6 +161,7 @@
         "iam:ListInstanceProfiles",
         "iam:ListServerCertificates",
         "kinesis:DescribeStream",
+        "kinesis:GetResourcePolicy",
         "kinesis:ListStreams",
         "kinesis:ListTagsForStream",
         "kms:DescribeKey",
@@ -152,6 +179,20 @@
         "opensearch:ListDomainNames",
         "organizations:ListAccounts",
         "pricing:GetProducts",
+        "qapps:ListLibraryItems",
+        "qapps:ListQApps",
+        "qapps:ListTagsForResource",
+        "qbusiness:ListApplications",
+        "qbusiness:ListConversations",
+        "qbusiness:ListDataSourceSyncJobs",
+        "qbusiness:ListDataSources",
+        "qbusiness:ListDocuments",
+        "qbusiness:ListIndices",
+        "qbusiness:ListMessages",
+        "qbusiness:ListPlugins",
+        "qbusiness:ListRetrievers",
+        "qbusiness:ListTagsForResource",
+        "qbusiness:ListWebExperiences",
         "rds:DescribeDbClusterSnapshots",
         "rds:DescribeDbClusters",
         "rds:DescribeDbInstances",
@@ -164,6 +205,7 @@
         "route53:ListTagsForResource",
         "s3:GetAccountPublicAccessBlock",
         "s3:GetBucketAcl",
+        "s3:GetBucketLifecycleConfiguration",
         "s3:GetBucketLocation",
         "s3:GetBucketLogging",
         "s3:GetBucketPolicy",
@@ -213,6 +255,7 @@
         "sagemaker:ListTrials",
         "sagemaker:ListUserProfiles",
         "sagemaker:ListWorkteams",
+        "secretsmanager:GetResourcePolicy",
         "secretsmanager:ListSecrets",
         "servicequotas:ListServiceQuotas",
         "sns:GetPlatformApplicationAttributes",

diff --git a/iam/gcp/fix_access.json b/iam/gcp/fix_access.json
@@ -3,6 +3,22 @@
   "description": "Permissions required to collect resources.",
   "stage": "GA",
   "includedPermissions": [
+    "aiplatform.projects.locations.batchPredictionJobs.list",
+    "aiplatform.projects.locations.customJobs.list",
+    "aiplatform.projects.locations.datasets.list",
+    "aiplatform.projects.locations.endpoints.list",
+    "aiplatform.projects.locations.featureGroups.list",
+    "aiplatform.projects.locations.featurestores.list",
+    "aiplatform.projects.locations.hyperparameterTuningJobs.list",
+    "aiplatform.projects.locations.indexEndpoints.list",
+    "aiplatform.projects.locations.indexes.list",
+    "aiplatform.projects.locations.modelDeploymentMonitoringJobs.list",
+    "aiplatform.projects.locations.models.list",
+    "aiplatform.projects.locations.pipelineJobs.list",
+    "aiplatform.projects.locations.schedules.list",
+    "aiplatform.projects.locations.tensorboards.list",
+    "aiplatform.projects.locations.trainingPipelines.list",
+    "aiplatform.projects.locations.tuningJobs.list",
     "cloudsql.backupRuns.list",
     "cloudsql.databases.list",
     "cloudsql.instances.get",