Merge pull request #113 from degoldner/main

Add ram:AssociateResourceShare to pivot role template
data-dot-all · Aug 24, 2022 · 03df865 · 03df865
2 parents 1c0f4f2 + ac06f78
commit 03df865
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/deploy/pivot_role/pivotRole.yaml b/deploy/pivot_role/pivotRole.yaml
@@ -360,6 +360,14 @@ Resources:
               'ForAllValues:StringLike':
                 'ram:ResourceShareName':
                   - LakeFormation*
+          - Effect: Allow
+            Action:
+              - 'ram:AssociateResourceShare'
+            Resource: !Sub 'arn:aws:ram:*:${AWS::AccountId}:resource-share/*'
+            Condition:
+              'ForAllValues:StringLike':
+                'ram:ResourceShareName':
+                  - LakeFormation*
           - Effect: Allow
             Action:
               - 'ram:DeleteResourceShare'