fix: gcp promote quarantine failed to add tag in scanning bucket

trendmicro · Jan 9, 2024 · 4d3d406 · 4d3d406
1 parent c6f13b3
commit 4d3d406
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/post-scan-actions/gcp-python-promote-or-quarantine/main.tf b/post-scan-actions/gcp-python-promote-or-quarantine/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     google = {
       source = "hashicorp/google"
-      version = "~> 4.0.0"
+      version = "~> 5.11.0"
     }
   }
 }
@@ -49,8 +49,10 @@ resource "google_project_iam_custom_role" "scanning_bucket_access_role" {
   permissions = var.promote_mode == "move" || var.quarantine_mode == "move" ? [
     "storage.objects.delete",
     "storage.objects.get",
+    "storage.objects.update"
   ] : [
     "storage.objects.get",
+    "storage.objects.update"
   ]
 }