Merge pull request #28 from CloudHealth/angel/GetPublicAccessBlockPer…

…missions Adding s3:GetBucketPublicAccessBlock and s3:GetAccountPublicAccessBlock
CloudHealth · Jul 6, 2020 · 8e9351f · 8e9351f
2 parents 6cb656f + 9985a09
commit 8e9351f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/role/inputs.tf b/role/inputs.tf
@@ -105,6 +105,8 @@ variable "default-readonly-policy" {
         "route53:List*",
         "rds:Describe*",
         "rds:ListTagsForResource",
+        "s3:GetAccountPublicAccessBlock",
+        "s3:GetBucketPublicAccessBlock",
         "s3:GetBucketAcl",
         "s3:GetBucketLocation",
         "s3:GetBucketLogging",