fix: adds missing snowflake permissions (#2083)

glerb · Nov 20, 2020 · df45488 · df45488
1 parent 7eef8e5
commit df45488
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/deployments/auxiliary/cloudformation/panther-deployment-role.yml b/deployments/auxiliary/cloudformation/panther-deployment-role.yml
@@ -129,6 +129,9 @@ Resources:
               - ec2:RevokeSecurityGroupIngress
               - ec2:UpdateSecurityGroupRuleDescriptionsEgress
               - ec2:UpdateSecurityGroupRuleDescriptionsIngress
+              - elasticfilesystem:ClientMount
+              - elasticfilesystem:ClientRootAccess
+              - elasticfilesystem:ClientWrite
               - elasticfilesystem:CreateAccessPoint
               - elasticfilesystem:CreateFileSystem
               - elasticfilesystem:CreateMountTarget

diff --git a/deployments/auxiliary/terraform/panther_deployment_role/main.tf b/deployments/auxiliary/terraform/panther_deployment_role/main.tf
@@ -114,6 +114,9 @@ resource "aws_iam_policy" "deployment" {
         "ec2:RevokeSecurityGroupIngress",
         "ec2:UpdateSecurityGroupRuleDescriptionsEgress",
         "ec2:UpdateSecurityGroupRuleDescriptionsIngress",
+        "elasticfilesystem:ClientMount",
+        "elasticfilesystem:ClientRootAccess",
+        "elasticfilesystem:ClientWrite",
         "elasticfilesystem:CreateAccessPoint",
         "elasticfilesystem:CreateFileSystem",
         "elasticfilesystem:CreateMountTarget",