add group permissions on /

YaleSpinup · Mar 8, 2021 · 51a957c · 51a957c
1 parent aaec37b
commit 51a957c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/api/policy.go b/api/policy.go
@@ -56,10 +56,11 @@ func (s *server) repositoryUserCreatePolicy() (string, error) {
 					"iam:CreatePolicyVersion",
 					"iam:CreateUser",
 					"iam:GetGroup",
+					"iam:CreateGroup",
 					"iam:TagUser",
 				},
 				Resource: []string{
-					fmt.Sprintf("arn:aws:iam::*:group/spinup/%s/*", s.org),
+					"arn:aws:iam::*:group/*",
 					fmt.Sprintf("arn:aws:iam::*:policy/spinup/%s/*", s.org),
 					fmt.Sprintf("arn:aws:iam::*:user/spinup/%s/*", s.org),
 				},