Merge pull request #259 from andrew-aiken/bugfix/codebuild-secrets-rd…

…s-snapshot-perm-error Updated codebuild secrets iam permissions to allow tagging rds resource
RhinoSecurityLabs · Jun 7, 2024 · 6e61938 · 6e61938
2 parents e6d1d77 + ea40859
commit 6e61938
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scenarios/codebuild_secrets/terraform/iam.tf b/scenarios/codebuild_secrets/terraform/iam.tf
@@ -32,6 +32,7 @@ resource "aws_iam_policy" "cg-calrissian-policy" {
             "Sid": "calrissian",
             "Effect": "Allow",
             "Action": [
+                "rds:AddTagsToResource",
                 "rds:CreateDBSnapshot",
                 "rds:DescribeDBInstances",
                 "rds:ModifyDBInstance",