diff --git a/iam/aws/FixCollect.json b/iam/aws/FixCollect.json index 7d75111..f55ad31 100644 --- a/iam/aws/FixCollect.json +++ b/iam/aws/FixCollect.json @@ -14,6 +14,7 @@ "athena:ListTagsForResource", "athena:ListWorkGroups", "autoscaling:DescribeAutoScalingGroups", + "backup:GetBackupVaultAccessPolicy", "backup:ListBackupJobs", "backup:ListBackupPlans", "backup:ListBackupVaults", @@ -26,6 +27,28 @@ "backup:ListRestoreJobs", "backup:ListRestoreTestingPlans", "backup:ListTags", + "bedrock-agent:GetAgent", + "bedrock-agent:GetAgentVersion", + "bedrock-agent:GetFlow", + "bedrock-agent:GetFlowVersion", + "bedrock-agent:GetKnowledgeBase", + "bedrock-agent:GetPrompt", + "bedrock-agent:ListAgents", + "bedrock-agent:ListFlows", + "bedrock-agent:ListKnowledgeBases", + "bedrock-agent:ListPrompts", + "bedrock-agent:ListTagsForResource", + "bedrock:GetCustomModel", + "bedrock:GetEvaluationJob", + "bedrock:GetGuardrail", + "bedrock:GetModelCustomizationJob", + "bedrock:ListCustomModels", + "bedrock:ListEvaluationJobs", + "bedrock:ListFoundationModels", + "bedrock:ListGuardrails", + "bedrock:ListModelCustomizationJobs", + "bedrock:ListProvisionedModelThroughputs", + "bedrock:ListTagsForResource", "cloudformation:DescribeStacks", "cloudformation:ListStackInstances", "cloudformation:ListStackResources", @@ -51,6 +74,7 @@ "cloudtrail:ListTags", "cloudtrail:ListTrails", "cloudwatch:DescribeAlarms", + "cloudwatch:DescribeResourcePolicies", "cloudwatch:GetMetricData", "cognito-idp:ListGroups", "cognito-idp:ListTagsForResource", @@ -61,6 +85,7 @@ "dynamodb:DescribeContinuousBackups", "dynamodb:DescribeGlobalTable", "dynamodb:DescribeTable", + "dynamodb:GetResourcePolicy", "dynamodb:ListGlobalTables", "dynamodb:ListTables", "dynamodb:ListTagsOfResource", @@ -89,6 +114,7 @@ "ecr-public:DescribeRepositories", "ecr:DescribeRepositories", "ecr:GetLifecyclePolicy", + "ecr:GetRepositoryPolicy", "ecs:DescribeCapacityProviders", "ecs:DescribeClusters", "ecs:DescribeContainerInstances", @@ -135,6 +161,7 @@ "iam:ListInstanceProfiles", "iam:ListServerCertificates", "kinesis:DescribeStream", + "kinesis:GetResourcePolicy", "kinesis:ListStreams", "kinesis:ListTagsForStream", "kms:DescribeKey", @@ -152,6 +179,20 @@ "opensearch:ListDomainNames", "organizations:ListAccounts", "pricing:GetProducts", + "qapps:ListLibraryItems", + "qapps:ListQApps", + "qapps:ListTagsForResource", + "qbusiness:ListApplications", + "qbusiness:ListConversations", + "qbusiness:ListDataSourceSyncJobs", + "qbusiness:ListDataSources", + "qbusiness:ListDocuments", + "qbusiness:ListIndices", + "qbusiness:ListMessages", + "qbusiness:ListPlugins", + "qbusiness:ListRetrievers", + "qbusiness:ListTagsForResource", + "qbusiness:ListWebExperiences", "rds:DescribeDbClusterSnapshots", "rds:DescribeDbClusters", "rds:DescribeDbInstances", @@ -164,6 +205,7 @@ "route53:ListTagsForResource", "s3:GetAccountPublicAccessBlock", "s3:GetBucketAcl", + "s3:GetBucketLifecycleConfiguration", "s3:GetBucketLocation", "s3:GetBucketLogging", "s3:GetBucketPolicy", @@ -213,6 +255,7 @@ "sagemaker:ListTrials", "sagemaker:ListUserProfiles", "sagemaker:ListWorkteams", + "secretsmanager:GetResourcePolicy", "secretsmanager:ListSecrets", "servicequotas:ListServiceQuotas", "sns:GetPlatformApplicationAttributes", diff --git a/iam/gcp/fix_access.json b/iam/gcp/fix_access.json index e8d4b5a..9a48336 100644 --- a/iam/gcp/fix_access.json +++ b/iam/gcp/fix_access.json @@ -3,6 +3,22 @@ "description": "Permissions required to collect resources.", "stage": "GA", "includedPermissions": [ + "aiplatform.projects.locations.batchPredictionJobs.list", + "aiplatform.projects.locations.customJobs.list", + "aiplatform.projects.locations.datasets.list", + "aiplatform.projects.locations.endpoints.list", + "aiplatform.projects.locations.featureGroups.list", + "aiplatform.projects.locations.featurestores.list", + "aiplatform.projects.locations.hyperparameterTuningJobs.list", + "aiplatform.projects.locations.indexEndpoints.list", + "aiplatform.projects.locations.indexes.list", + "aiplatform.projects.locations.modelDeploymentMonitoringJobs.list", + "aiplatform.projects.locations.models.list", + "aiplatform.projects.locations.pipelineJobs.list", + "aiplatform.projects.locations.schedules.list", + "aiplatform.projects.locations.tensorboards.list", + "aiplatform.projects.locations.trainingPipelines.list", + "aiplatform.projects.locations.tuningJobs.list", "cloudsql.backupRuns.list", "cloudsql.databases.list", "cloudsql.instances.get",