Terraform - dsk-devops 사용자에 steampipe 동작을 위한 policy 추가

2024-01-30 11:13:25 +09:00
parent 7b290f8267
commit 886e60ab28
1 changed files with 4 additions and 1 deletions
--- a/terraform/iam/users/variables.tf
+++ b/terraform/iam/users/variables.tf
@@ -11,7 +11,10 @@ variable "iam_users" {
      policies = [
        "arn:aws:iam::508259851457:policy/DSK_LambdaExecute",
        "arn:aws:iam::aws:policy/AmazonS3FullAccess",
-        "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess"        
+        "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess",
+        "arn:aws:iam::aws:policy/SecurityAudit",
+        "arn:aws:iam::aws:policy/AWSWAFReadOnlyAccess",
+        "arn:aws:iam::aws:policy/AmazonElasticFileSystemReadOnlyAccess"
      ]
    }
  }