expel-io / terraform-aws-cloudtrail

Terraform module for configuring AWS CloudTrail to integrate with Expel
MIT License
2 stars 4 forks source link

MET-443 adding DescribeOrganization permission #43

Closed heyweswu closed 1 year ago

heyweswu commented 1 year ago

We don't have a way to know whether an account onboarded is the management account, even if the management account ID is provided (it can be wrong). Adding DescribeOrganization permission so we can determine whether an account is the organization management account.

Xxyumi-hub commented 1 year ago

Are we also going to be updating our docs + workbench to mention this new permission?

heyweswu commented 1 year ago

Are we also going to be updating our docs + workbench to mention this new permission?

Yep, I put in the request to the content team to make changes this morning.