[DOM-58654] - updated tagging permissions (#251)

* updated tagging permissions * updated from comments
dominodatalab · Jun 18, 2024 · cd2c348 · cd2c348
1 parent 39352b4
commit cd2c348
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/modules/iam-bootstrap/bootstrap-0.json b/modules/iam-bootstrap/bootstrap-0.json
@@ -125,7 +125,10 @@
         "logs:ListTagsLogGroup",
         "logs:ListTagsForResource",
         "logs:PutRetentionPolicy",
-        "logs:TagLogGroup"
+        "logs:TagLogGroup",
+        "logs:UntagLogGroup",
+        "logs:TagResource",
+        "logs:UntagResource"
       ],
       "Resource": "*"
     },

diff --git a/modules/iam-bootstrap/bootstrap-1.json b/modules/iam-bootstrap/bootstrap-1.json
@@ -224,7 +224,9 @@
         "glue:GetTable",
         "glue:DeleteTable",
         "glue:GetCrawler",
-        "glue:DeleteCrawler"
+        "glue:DeleteCrawler",
+        "glue:TagResource",
+        "glue:UntagResource"
       ],
       "Resource": [
         "arn:${partition}:glue:*:*:catalog",