allow iam:PassRole for hotsock/* roles

hotsock · Oct 27, 2024 · b42734d · b42734d
1 parent 9771429
commit b42734d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/installer-permissions.yml b/installer-permissions.yml
@@ -272,6 +272,10 @@ Resources:
               - redshift:PurchaseReservedNodeOffering
               - savingsplans:*
             Resource: "*"
+          - Sid: AllowPassingRoles
+            Effect: Allow
+            Action: iam:PassRole
+            Resource: !Sub arn:${AWS::Partition}:iam::*:role/hotsock/*
           - Sid: AllowOrgInfo
             Effect: Allow
             Action: organizations:DescribeOrganization