fix: policy version permissions for App Deployer (#424)

* fix: policy version permissions for App Deployer * fix: adding GetPolicy perm
awslabs · Apr 5, 2021 · 65d8207 · 65d8207
1 parent 9bfd5d2
commit 65d8207
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/main/cicd/cicd-pipeline/config/infra/cloudformation.yml b/main/cicd/cicd-pipeline/config/infra/cloudformation.yml
@@ -236,6 +236,8 @@ Resources:
                 Effect: Allow
               - Action:
                   - iam:CreatePolicy
+                  - iam:GetPolicy
+                  - iam:*PolicyVersion*
                 Effect: Allow
                 Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:policy/${self:custom.settings.namespace}-*'
               - Action: