Include iam:CreateServiceLinkedRole permissions on create handlers

aws-cloudformation · Sep 18, 2023 · d7c48d1 · d7c48d1
1 parent c9d069c
commit d7c48d1
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 0 deletions.
diff --git a/aws-rds-dbcluster/aws-rds-dbcluster.json b/aws-rds-dbcluster/aws-rds-dbcluster.json
@@ -462,6 +462,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "iam:PassRole",
         "rds:AddRoleToDBCluster",
         "rds:AddTagsToResource",

diff --git a/aws-rds-dbclusterparametergroup/aws-rds-dbclusterparametergroup.json b/aws-rds-dbclusterparametergroup/aws-rds-dbclusterparametergroup.json
@@ -73,6 +73,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "rds:AddTagsToResource",
         "rds:CreateDBClusterParameterGroup",
         "rds:DescribeDBClusterParameterGroups",

diff --git a/aws-rds-dbparametergroup/aws-rds-dbparametergroup.json b/aws-rds-dbparametergroup/aws-rds-dbparametergroup.json
@@ -74,6 +74,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "rds:AddTagsToResource",
         "rds:CreateDBParameterGroup",
         "rds:DescribeDBParameterGroups",

diff --git a/aws-rds-dbsubnetgroup/aws-rds-dbsubnetgroup.json b/aws-rds-dbsubnetgroup/aws-rds-dbsubnetgroup.json
@@ -72,6 +72,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "rds:CreateDBSubnetGroup",
         "rds:DescribeDBSubnetGroups",
         "rds:AddTagsToResource",

diff --git a/aws-rds-eventsubscription/aws-rds-eventsubscription.json b/aws-rds-eventsubscription/aws-rds-eventsubscription.json
@@ -90,6 +90,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "rds:CreateEventSubscription",
         "rds:DescribeEventSubscriptions",
         "rds:ListTagsForResource",

diff --git a/aws-rds-optiongroup/aws-rds-optiongroup.json b/aws-rds-optiongroup/aws-rds-optiongroup.json
@@ -145,6 +145,7 @@
   "handlers": {
     "create": {
       "permissions": [
+        "iam:CreateServiceLinkedRole",
         "rds:AddTagsToResource",
         "rds:CreateOptionGroup",
         "rds:DescribeOptionGroups",