Wildcard IAM Tagging (allow InstanceProfiles and Policies to be tagge…

…d) (#283)
mattclay · Jun 21, 2023 · bb49211 · bb49211
1 parent a80a976
commit bb49211
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/aws/policy/security-services.yaml b/aws/policy/security-services.yaml
@@ -65,8 +65,8 @@ Statement:
       - access-analyzer:ValidatePolicy
       - iam:GetRole
       - iam:List*
-      - iam:TagRole
-      - iam:UntagRole
+      - iam:Tag*
+      - iam:Untag*
       - kms:CreateAlias
       - kms:CreateGrant
       - kms:DeleteAlias