adjust sample policy to recent change in aws permissions -- #112

reply-fr · Jul 29, 2023 · de75d9d · de75d9d
1 parent 8724f2c
commit de75d9d
Showing 1 changed file with 27 additions and 2 deletions.
diff --git a/fixtures/policies/allow_account_automation.json b/fixtures/policies/allow_account_automation.json
@@ -43,8 +43,33 @@
          "Sid": "AllowToAccessCostInformation",
          "Effect": "Allow",
          "Action": [
-            "aws-portal:ViewBilling",
-            "ce:*"
+            "account:GetAccountInformation",
+            "billing:GetBillingData",
+            "billing:GetBillingDetails",
+            "billing:GetBillingNotifications",
+            "billing:GetBillingPreferences",
+            "billing:GetContractInformation",
+            "billing:GetCredits",
+            "billing:GetIAMAccessPreference",
+            "billing:GetSellerOfRecord",
+            "billing:ListBillingViews",
+            "ce:*",
+            "consolidatedbilling:GetAccountBillingRole",
+            "consolidatedbilling:ListLinkedAccounts",
+            "cur:GetClassicReport",
+            "cur:GetClassicReportPreferences",
+            "cur:ValidateReportDestination",
+            "freetier:GetFreeTierAlertPreference",
+            "freetier:GetFreeTierUsage",
+            "invoicing:GetInvoiceEmailDeliveryPreferences",
+            "invoicing:GetInvoicePDF",
+            "invoicing:ListInvoiceSummaries",
+            "payments:GetPaymentInstrument",
+            "payments:GetPaymentStatus",
+            "payments:ListPaymentPreferences",
+            "tax:GetTaxInheritance",
+            "tax:GetTaxRegistrationDocument",
+            "tax:ListTaxRegistrations"
          ],
          "Resource": "*"
       }