GetContactInformation perm added (#121)

sysdiglabs · Jun 6, 2024 · d5baab4 · d5baab4
1 parent bf4346d
commit d5baab4
Show file tree

Hide file tree

Showing 6 changed files with 27 additions and 0 deletions.
diff --git a/templates_cspm/CloudAgentlessRole.yaml b/templates_cspm/CloudAgentlessRole.yaml
@@ -70,6 +70,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
 
 Outputs:
   RoleARN:

diff --git a/templates_cspm/OrgCloudAgentlessRole.yaml b/templates_cspm/OrgCloudAgentlessRole.yaml
@@ -72,6 +72,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   RoleStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties:
@@ -148,3 +151,6 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"
diff --git a/templates_cspm_cloudlogs/FullInstall.yaml b/templates_cspm_cloudlogs/FullInstall.yaml
@@ -83,6 +83,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:

diff --git a/templates_cspm_cloudlogs/OrgFullInstall.yaml b/templates_cspm_cloudlogs/OrgFullInstall.yaml
@@ -88,6 +88,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:
@@ -202,3 +205,6 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"
diff --git a/templates_cspm_eventbridge/FullInstall.yaml b/templates_cspm_eventbridge/FullInstall.yaml
@@ -95,6 +95,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:

diff --git a/templates_cspm_eventbridge/OrgFullInstall.yaml b/templates_cspm_eventbridge/OrgFullInstall.yaml
@@ -139,6 +139,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:
@@ -257,6 +260,9 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"
           EventBridgeRole:
             Type: AWS::IAM::Role
             Properties: