diff --git a/cft/generated/templates/policies/aws/readonly_policy.json b/cft/generated/templates/policies/aws/readonly_policy.json
index eb4c668..c39a368 100644
--- a/cft/generated/templates/policies/aws/readonly_policy.json
+++ b/cft/generated/templates/policies/aws/readonly_policy.json
@@ -25,6 +25,11 @@
                 "eks:ListNodegroups",
                 "glue:GetConnections",
                 "glue:GetSecurityConfigurations",
+                "glue:GetMLTransforms",
+                "glue:GetCrawlers",
+                "glue:GetDevEndpoints",
+                "glue:GetJobs",
+                "glue:GetDataCatalogEncryptionSettings",
                 "inspector2:ListFindings",
                 "inspector2:BatchGetAccountStatus",
                 "inspector2:ListFindingAggregations",
diff --git a/cft/generated/templates/policies/awschina/readonly_policy.json b/cft/generated/templates/policies/awschina/readonly_policy.json
index cfa0b03..6c4e149 100644
--- a/cft/generated/templates/policies/awschina/readonly_policy.json
+++ b/cft/generated/templates/policies/awschina/readonly_policy.json
@@ -25,6 +25,11 @@
                 "eks:ListNodegroups",
                 "glue:GetConnections",
                 "glue:GetSecurityConfigurations",
+                "glue:GetMLTransforms",
+                "glue:GetCrawlers",
+                "glue:GetDevEndpoints",
+                "glue:GetJobs",
+                "glue:GetDataCatalogEncryptionSettings",
                 "inspector2:ListFindings",
                 "inspector2:BatchGetAccountStatus",
                 "inspector2:ListFindingAggregations",
diff --git a/cft/generated/templates/policies/awsgov/readonly_policy.json b/cft/generated/templates/policies/awsgov/readonly_policy.json
index 0279312..ad5a443 100644
--- a/cft/generated/templates/policies/awsgov/readonly_policy.json
+++ b/cft/generated/templates/policies/awsgov/readonly_policy.json
@@ -25,6 +25,11 @@
                 "eks:ListNodegroups",
                 "glue:GetConnections",
                 "glue:GetSecurityConfigurations",
+                "glue:GetMLTransforms",
+                "glue:GetCrawlers",
+                "glue:GetDevEndpoints",
+                "glue:GetJobs",
+                "glue:GetDataCatalogEncryptionSettings",
                 "inspector2:ListFindings",
                 "inspector2:BatchGetAccountStatus",
                 "inspector2:ListFindingAggregations",
diff --git a/cft/generated/templates/role_based/permissions_readonly_cft.yml b/cft/generated/templates/role_based/permissions_readonly_cft.yml
index 6ecb554..6076f59 100644
--- a/cft/generated/templates/role_based/permissions_readonly_cft.yml
+++ b/cft/generated/templates/role_based/permissions_readonly_cft.yml
@@ -63,6 +63,11 @@ Resources:
               - eks:ListNodegroups
               - glue:GetConnections
               - glue:GetSecurityConfigurations
+              - glue:GetMLTransforms
+              - glue:GetCrawlers
+              - glue:GetDevEndpoints
+              - glue:GetJobs
+              - glue:GetDataCatalogEncryptionSettings
               - inspector2:ListFindings
               - inspector2:BatchGetAccountStatus
               - inspector2:ListFindingAggregations
diff --git a/cft/generated/templates/role_based/permissions_readwrite_cft.yml b/cft/generated/templates/role_based/permissions_readwrite_cft.yml
index 998a737..c3bcb6b 100644
--- a/cft/generated/templates/role_based/permissions_readwrite_cft.yml
+++ b/cft/generated/templates/role_based/permissions_readwrite_cft.yml
@@ -61,6 +61,11 @@ Resources:
               - eks:ListNodegroups
               - glue:GetConnections
               - glue:GetSecurityConfigurations
+              - glue:GetMLTransforms
+              - glue:GetCrawlers
+              - glue:GetDevEndpoints
+              - glue:GetJobs
+              - glue:GetDataCatalogEncryptionSettings
               - inspector2:ListFindings
               - inspector2:BatchGetAccountStatus
               - inspector2:ListFindingAggregations
diff --git a/cft/generated/templates/user_based/permissions_readonly_cft.yml b/cft/generated/templates/user_based/permissions_readonly_cft.yml
index 48fdced..0a9c4b4 100644
--- a/cft/generated/templates/user_based/permissions_readonly_cft.yml
+++ b/cft/generated/templates/user_based/permissions_readonly_cft.yml
@@ -56,6 +56,11 @@ Resources:
               - eks:ListNodegroups
               - glue:GetConnections
               - glue:GetSecurityConfigurations
+              - glue:GetMLTransforms
+              - glue:GetCrawlers
+              - glue:GetDevEndpoints
+              - glue:GetJobs
+              - glue:GetDataCatalogEncryptionSettings
               - inspector2:ListFindings
               - inspector2:BatchGetAccountStatus
               - inspector2:ListFindingAggregations
diff --git a/cft/generated/templates/user_based/permissions_readwrite_cft.yml b/cft/generated/templates/user_based/permissions_readwrite_cft.yml
index e741924..510d421 100644
--- a/cft/generated/templates/user_based/permissions_readwrite_cft.yml
+++ b/cft/generated/templates/user_based/permissions_readwrite_cft.yml
@@ -56,6 +56,11 @@ Resources:
               - eks:ListNodegroups
               - glue:GetConnections
               - glue:GetSecurityConfigurations
+              - glue:GetMLTransforms
+              - glue:GetCrawlers
+              - glue:GetDevEndpoints
+              - glue:GetJobs
+              - glue:GetDataCatalogEncryptionSettings
               - inspector2:ListFindings
               - inspector2:BatchGetAccountStatus
               - inspector2:ListFindingAggregations
diff --git a/cft/replacements/readonly_policy.yml b/cft/replacements/readonly_policy.yml
index 46accc3..693c3fb 100644
--- a/cft/replacements/readonly_policy.yml
+++ b/cft/replacements/readonly_policy.yml
@@ -23,6 +23,11 @@ Statement:
       - 'eks:ListNodegroups'
       - 'glue:GetConnections'
       - 'glue:GetSecurityConfigurations'
+      - 'glue:GetMLTransforms'
+      - 'glue:GetCrawlers'
+      - 'glue:GetDevEndpoints'
+      - 'glue:GetJobs'
+      - 'glue:GetDataCatalogEncryptionSettings'
       - 'inspector2:ListFindings'
       - 'inspector2:BatchGetAccountStatus'
       - 'inspector2:ListFindingAggregations'