From cebd5cce3e920015e30b198ecf731631580666e7 Mon Sep 17 00:00:00 2001
From: Daniel Lorch <dlorch@gmail.com>
Date: Tue, 23 Nov 2021 17:26:14 +0100
Subject: [PATCH] Update ProwlerRole.yaml to have same permissions as
 util/org-multi-account/ProwlerRole.yaml

---
 .../serverless_codebuild/templates/ProwlerRole.yaml              | 1 +
 1 file changed, 1 insertion(+)

diff --git a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
index 138d880976..e5efcd4596 100644
--- a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
+++ b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
@@ -83,6 +83,7 @@ Resources:
                   - dax:ListTables
                   - ds:ListAuthorizedApplications
                   - ds:DescribeRoles
+                  - ec2:GetEbsEncryptionByDefault
                   - ecr:Describe*
                   - lambda:GetAccountSettings
                   - lambda:GetFunctionConfiguration