diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf index 5a880c11..3c24e993 100644 --- a/modules/iam-group-with-policies/policies.tf +++ b/modules/iam-group-with-policies/policies.tf @@ -18,7 +18,9 @@ data "aws_iam_policy_document" "iam_self_management" { effect = "Allow" actions = [ + "iam:GetAccountSummary", "iam:GetAccountPasswordPolicy", + "iam:ListAccountAliases", "iam:ListVirtualMFADevices" ]