Update detected

zoph-io · Jul 9, 2024 · 41e8a51 · 41e8a51
1 parent 2acbdc5
commit 41e8a51
Showing 1 changed file with 40 additions and 3 deletions.
diff --git a/policies/AWSLicenseManagerLinuxSubscriptionsServiceRolePolicy b/policies/AWSLicenseManagerLinuxSubscriptionsServiceRolePolicy
@@ -31,11 +31,48 @@
                     "Resource": [
                         "*"
                     ]
+                },
+                {
+                    "Sid": "SecretsManagerPermissions",
+                    "Effect": "Allow",
+                    "Action": [
+                        "secretsmanager:GetSecretValue"
+                    ],
+                    "Condition": {
+                        "StringEquals": {
+                            "aws:ResourceTag/LicenseManagerLinuxSubscriptions": "enabled",
+                            "aws:ResourceAccount": "${aws:PrincipalAccount}"
+                        }
+                    },
+                    "Resource": [
+                        "arn:aws:secretsmanager:*:*:secret:*"
+                    ]
+                },
+                {
+                    "Sid": "KMSPermissions",
+                    "Effect": "Allow",
+                    "Action": [
+                        "kms:Decrypt"
+                    ],
+                    "Condition": {
+                        "StringEquals": {
+                            "aws:ResourceTag/LicenseManagerLinuxSubscriptions": "enabled",
+                            "aws:ResourceAccount": "${aws:PrincipalAccount}"
+                        },
+                        "StringLike": {
+                            "kms:ViaService": [
+                                "secretsmanager.*.amazonaws.com"
+                            ]
+                        }
+                    },
+                    "Resource": [
+                        "arn:aws:kms:*:*:key/*"
+                    ]
                 }
             ]
         },
-        "VersionId": "v1",
-        "IsDefaultVersion": false,
-        "CreateDate": "2022-12-20T18:54:54+00:00"
+        "VersionId": "v2",
+        "IsDefaultVersion": true,
+        "CreateDate": "2024-07-08T22:04:56+00:00"
     }
 }