Allow additional organization List and Describe calls (#10)

someengineering · Oct 10, 2024 · 68165a1 · 68165a1
1 parent dfce1d4
commit 68165a1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/fix-role.cf.template b/fix-role.cf.template
@@ -42,8 +42,8 @@ Resources:
           - Effect: Allow
             Resource: '*'
             Action:
-            - organizations:ListAccounts
-            - organizations:DescribeAccount
+            - organizations:List*
+            - organizations:Describe*
             - ec2:DescribeRegions
             - iam:ListAccountAliases
       - PolicyName: FixPricingList