diff --git a/permissions/create_role_to_assume_cfn.yaml b/permissions/create_role_to_assume_cfn.yaml index 14c4f97e4e..2f1def4cc4 100644 --- a/permissions/create_role_to_assume_cfn.yaml +++ b/permissions/create_role_to_assume_cfn.yaml @@ -91,6 +91,8 @@ Resources: - 'shield:GetSubscriptionState' - 'securityhub:BatchImportFindings' - 'securityhub:GetFindings' + - 'servicecatalog:Describe*' + - 'servicecatalog:List*' - 'ssm:GetDocument' - 'ssm-incidents:List*' - 'support:Describe*' diff --git a/permissions/prowler-additions-policy.json b/permissions/prowler-additions-policy.json index 6b463320d2..74c6ba8e6d 100644 --- a/permissions/prowler-additions-policy.json +++ b/permissions/prowler-additions-policy.json @@ -39,6 +39,8 @@ "shield:GetSubscriptionState", "securityhub:BatchImportFindings", "securityhub:GetFindings", + "servicecatalog:Describe*", + "servicecatalog:List*", "ssm:GetDocument", "ssm-incidents:List*", "support:Describe*",