[DBEventSubscription][OptionGroup][DBParameterGroup][DBClusterParamet…

…erGroup] explicitly add add/remove tags permissions (#463) Co-authored-by: Valentin Shirshov <[email protected]>
aws-cloudformation · Aug 25, 2023 · c9d069c · c9d069c
1 parent 35056b8
commit c9d069c
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 4 deletions.
diff --git a/aws-rds-dbclusterparametergroup/aws-rds-dbclusterparametergroup.json b/aws-rds-dbclusterparametergroup/aws-rds-dbclusterparametergroup.json
@@ -80,7 +80,8 @@
         "rds:DescribeDBClusters",
         "rds:DescribeEngineDefaultClusterParameters",
         "rds:ListTagsForResource",
-        "rds:ModifyDBClusterParameterGroup"
+        "rds:ModifyDBClusterParameterGroup",
+        "rds:RemoveTagsFromResource"
       ],
       "timeoutInMinutes": 180
     },

diff --git a/aws-rds-dbparametergroup/aws-rds-dbparametergroup.json b/aws-rds-dbparametergroup/aws-rds-dbparametergroup.json
@@ -80,7 +80,8 @@
         "rds:DescribeDBParameters",
         "rds:DescribeEngineDefaultParameters",
         "rds:ListTagsForResource",
-        "rds:ModifyDBParameterGroup"
+        "rds:ModifyDBParameterGroup",
+        "rds:RemoveTagsFromResource"
       ]
     },
     "read": {

diff --git a/aws-rds-eventsubscription/aws-rds-eventsubscription.json b/aws-rds-eventsubscription/aws-rds-eventsubscription.json
@@ -92,7 +92,9 @@
       "permissions": [
         "rds:CreateEventSubscription",
         "rds:DescribeEventSubscriptions",
-        "rds:ListTagsForResource"
+        "rds:ListTagsForResource",
+        "rds:AddTagsToResource",
+        "rds:RemoveTagsFromResource"
       ]
     },
     "read": {

diff --git a/aws-rds-optiongroup/aws-rds-optiongroup.json b/aws-rds-optiongroup/aws-rds-optiongroup.json
@@ -149,7 +149,8 @@
         "rds:CreateOptionGroup",
         "rds:DescribeOptionGroups",
         "rds:ListTagsForResource",
-        "rds:ModifyOptionGroup"
+        "rds:ModifyOptionGroup",
+        "rds:RemoveTagsFromResource"
       ]
     },
     "read": {