From 94bc429bda4baceac400210c6cd0937614a62ace Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Tue, 19 Nov 2024 14:46:34 +0100
Subject: [PATCH] chore(iam): add missing service catalog permissions (#5822)

Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
---
 permissions/create_role_to_assume_cfn.yaml | 2 ++
 permissions/prowler-additions-policy.json  | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/permissions/create_role_to_assume_cfn.yaml b/permissions/create_role_to_assume_cfn.yaml
index 14c4f97e4e..2f1def4cc4 100644
--- a/permissions/create_role_to_assume_cfn.yaml
+++ b/permissions/create_role_to_assume_cfn.yaml
@@ -91,6 +91,8 @@ Resources:
                 - 'shield:GetSubscriptionState'
                 - 'securityhub:BatchImportFindings'
                 - 'securityhub:GetFindings'
+                - 'servicecatalog:Describe*'
+                - 'servicecatalog:List*'
                 - 'ssm:GetDocument'
                 - 'ssm-incidents:List*'
                 - 'support:Describe*'
diff --git a/permissions/prowler-additions-policy.json b/permissions/prowler-additions-policy.json
index 6b463320d2..74c6ba8e6d 100644
--- a/permissions/prowler-additions-policy.json
+++ b/permissions/prowler-additions-policy.json
@@ -39,6 +39,8 @@
         "shield:GetSubscriptionState",
         "securityhub:BatchImportFindings",
         "securityhub:GetFindings",
+        "servicecatalog:Describe*",
+        "servicecatalog:List*",
         "ssm:GetDocument",
         "ssm-incidents:List*",
         "support:Describe*",