Allow ecs:ListClusters for role "cg_web_developer_policy"

RhinoSecurityLabs · Nov 14, 2023 · fe7156d · fe7156d
1 parent daf3680
commit fe7156d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scenarios/ecs_privesc_evade_protection/terraform/iam.tf b/scenarios/ecs_privesc_evade_protection/terraform/iam.tf
@@ -172,6 +172,7 @@ resource "aws_iam_policy" "cg_web_developer_policy" {
           "ec2:DescribeSubnets",
           "s3:ListAllMyBuckets",
           "ecs:RegisterTaskDefinition",
+          "ecs:ListClusters",
           "iam:List*"
         ]
       },{