From 0bedaf4dc50752e004c39691bbaf64c49ba3f167 Mon Sep 17 00:00:00 2001
From: Denys Havrysh <Denys.Gavrysh@gmail.com>
Date: Sun, 3 Mar 2024 03:25:18 +0200
Subject: [PATCH] feat: Extend self-management policy to read account summary
 (iam-group-with-policies) (#462)

Co-authored-by: Bryant Biggs <bryantbiggs@gmail.com>
---
 modules/iam-group-with-policies/policies.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf
index 5a880c11..3c24e993 100644
--- a/modules/iam-group-with-policies/policies.tf
+++ b/modules/iam-group-with-policies/policies.tf
@@ -18,7 +18,9 @@ data "aws_iam_policy_document" "iam_self_management" {
     effect = "Allow"
 
     actions = [
+      "iam:GetAccountSummary",
       "iam:GetAccountPasswordPolicy",
+      "iam:ListAccountAliases",
       "iam:ListVirtualMFADevices"
     ]