GetContactInformation perm added (#121)

Author: ismael-penacho-sysdig

templates_cspm/CloudAgentlessRole.yaml

@@ -70,6 +70,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
 
 Outputs:
   RoleARN:

templates_cspm/OrgCloudAgentlessRole.yaml

@@ -72,6 +72,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   RoleStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties:
@@ -148,3 +151,6 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"

templates_cspm_cloudlogs/FullInstall.yaml

@@ -83,6 +83,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:

templates_cspm_cloudlogs/OrgFullInstall.yaml

@@ -88,6 +88,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:
@@ -202,3 +205,6 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"

templates_cspm_eventbridge/FullInstall.yaml

@@ -95,6 +95,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:

templates_cspm_eventbridge/OrgFullInstall.yaml

@@ -139,6 +139,9 @@ Resources:
                   - "lambda:GetRuntimeManagementConfig"
                   - "lambda:GetFunction"
                 Resource: "*"
+              - Effect: "Allow"
+                Action: "account:GetContactInformation"
+                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:
@@ -257,6 +260,9 @@ Resources:
                           - "lambda:GetRuntimeManagementConfig"
                           - "lambda:GetFunction"
                         Resource: "*"
+                      - Effect: "Allow"
+                        Action: "account:GetContactInformation"
+                        Resource: "*"
           EventBridgeRole:
             Type: AWS::IAM::Role
             Properties: