rds:describedbsnapshotattributes was missing from the policy (#843)

* rds:describedbsnapshotattributes was missing from the policy * Updated secmonkey_role_setup.py script to include the rds:describedbsnapshotattributes role
Netflix · Oct 20, 2017 · f9dfe69 · f9dfe69
1 parent 3f28dc7
commit f9dfe69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/docs/iam_aws.md b/docs/iam_aws.md
@@ -170,6 +170,7 @@ You will need to create this role in all AWS accounts that you want to monitor.
                     "rds:describedbinstances",
                     "rds:describedbsecuritygroups",
                     "rds:describedbsnapshots",
+                    "rds:describedbsnapshotattributes",
                     "rds:describedbsubnetgroups",
                     "redshift:describeclusters",
                     "route53:listhostedzones",

diff --git a/scripts/secmonkey_role_setup.py b/scripts/secmonkey_role_setup.py
@@ -144,6 +144,7 @@
            "rds:describedbinstances",
            "rds:describedbsecuritygroups",
            "rds:describedbsnapshots",
+           "rds:describedbsnapshotattributes",
            "rds:describedbsubnetgroups",
            "redshift:describeclusters",
            "route53:listhostedzones",