search

lacework / terraform-aws-config

Terraform module for configuring an integration with Lacework and AWS for cloud resource configuration assessment
6 stars 15 forks source link

feat(RAIN-91433): Add permission for get-api-keys in apigateway and apigatewayv2 #87

Closed jjzhangjjzhang closed 10 months ago

jjzhangjjzhang commented 10 months ago

Summary

We do not have permission for get-api-keys in apigateway and apigatewayv2. In this PR, we are adding permissions for this API. First of all, apigateway and apigatewayv2 are controlled by the same iam actions. In securityAudit, it actually has permissions for get APi for apigateway and apigatewayv2, but not for resource get-api-keys

How did you test this change?

Verified that the error is access denied without the change. With this PR on the terraform change, access denied is gone. Detail test is here https://docs.google.com/document/d/1eQowgxHJ6JXQdMx3oMI5usrI-TvqXq6iw3sm9AqsJp0/edit

Issue

https://lacework.atlassian.net/browse/RAIN-91433