Adding AWS SSO and Access Analyzer Support

primeharbor · May 14, 2024 · 3b784d1 · 3b784d1
1 parent 7ad8879
commit 3b784d1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cloudformation/AuditRole-Template.yaml b/cloudformation/AuditRole-Template.yaml
@@ -42,6 +42,7 @@ Resources:
       - arn:aws:iam::aws:policy/SecurityAudit
       - arn:aws:iam::aws:policy/ReadOnlyAccess
       - arn:aws:iam::aws:policy/AWSAccountManagementReadOnlyAccess
+      - arn:aws:iam::aws:policy/AWSSSOReadOnly
       Path: /
       AssumeRolePolicyDocument:
         Version: '2012-10-17'
@@ -69,7 +70,7 @@ Resources:
                 Action:
                 - "trustedAdvisor:*"
                 - "health:*"
-                - "guardduty:*"
+                - "access-analyzer:*"
                 - "macie:*"
                 - "inspector:*"
                 - "support:*"