diff --git a/README.md b/README.md index fbd7e4b..37ce4cc 100644 --- a/README.md +++ b/README.md @@ -177,4 +177,8 @@ The audit policy is comprised of the following permissions: | | compute-optimizer:GetEnrollmentStatusesForOrganization | | | | compute-optimizer:GetLambdaFunctionRecommendations | | | | compute-optimizer:GetRecommendationPreferences | | -| | compute-optimizer:GetRecommendationSummaries | | \ No newline at end of file +| | compute-optimizer:GetRecommendationSummaries | | +| KINESISANALYTICS | kinesisanalytics:ListApplicationSnapshots | | +| | kinesisanalytics:ListApplicationVersions | | +| | kinesisanalytics:DescribeApplicationVersion | | +| | kinesisanalytics:DescribeApplication | | diff --git a/main.tf b/main.tf index a811dd0..b23376b 100644 --- a/main.tf +++ b/main.tf @@ -238,6 +238,16 @@ data "aws_iam_policy_document" "lacework_audit_policy" { ] resources = ["*"] } + + statement { + sid = "KINESISANALYTICS" + actions = ["kinesisanalytics:ListApplicationSnapshots", + "kinesisanalytics:ListApplicationVersions", + "kinesisanalytics:DescribeApplicationVersion", + "kinesisanalytics:DescribeApplication", + ] + resources = ["*"] + } } resource "aws_iam_policy" "lacework_audit_policy" {