more shell iam perms

hackforla · Oct 13, 2024 · 2979e1b · 2979e1b
1 parent 612a95b
commit 2979e1b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/terraform-incubator/home-unite-us/dev/iam.tf b/terraform-incubator/home-unite-us/dev/iam.tf
@@ -122,12 +122,14 @@ resource "aws_iam_policy" "homeuniteus_manage_ecr" {
           Effect = "Allow",
           Action = [
             "cloudshell:CreateEnvironment",
-            "cloudshell:GetEnvironmentStatus"
+            "cloudshell:GetEnvironmentStatus",
+            "cloudshell:CreateSession"
           ],
           Resource = [
             "*",
           ]
         }
+        //arn:aws:cloudshell:us-west-2:035866691871:environment/642f2b30-d2dd-4fc6-95ad-3e32b4163d23
         # ,
         # {
         #   Sid = "ShellEcsContainerTask",