Add missing service grants to iam_policies

rodrigodelmonte · Aug 11, 2020 · 6cf5d08 · 6cf5d08
1 parent 187e1ec
commit 6cf5d08
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -18,7 +18,7 @@ Terraform 0.12. Module version to ~> v2.0.
 module "kinesis-stream" {
 
   source  = "rodrigodelmonte/kinesis-stream/aws"
-  version = "v2.0.1"
+  version = "v2.0.2"
 
   name                      = "kinesis_stream_example"
   shard_count               = 1

diff --git a/main.tf b/main.tf
@@ -25,7 +25,8 @@ resource "aws_iam_policy" "read-only" {
           "kinesis:DescribeStream",
           "kinesis:GetRecords",
           "kinesis:GetShardIterator",
-          "kinesis:SubscribeToShard"
+          "kinesis:SubscribeToShard",
+          "kinesis:ListShards"
         ]
         Resource = [
           aws_kinesis_stream.this.arn
@@ -45,6 +46,7 @@ resource "aws_iam_policy" "write-only" {
       {
         Effect = "Allow"
         Action = [
+          "kinesis:DescribeStream",
           "kinesis:PutRecord",
           "kinesis:PutRecords",
         ]