chore: limit aws workload roles to sqs:GetQueueAttributes (#139)

Signed-off-by: Jorge Turrado Ferrero <[email protected]>
kedacore · Dec 31, 2023 · 3a25e29 · 3a25e29
1 parent ca135f3
commit 3a25e29
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/terraform/modules/aws/iam/main.tf b/terraform/modules/aws/iam/main.tf
@@ -244,7 +244,7 @@ resource "aws_iam_policy" "workload1_role_policy" {
     "Statement": [
         {
             "Effect": "Allow",
-            "Action": "sqs:*",
+            "Action": "sqs:GetQueueAttributes",
             "Resource": "arn:aws:sqs:*:589761922677:assume-role-workload1-queue-*"
         }
     ]
@@ -262,7 +262,7 @@ resource "aws_iam_policy" "workload2_role_policy" {
     "Statement": [
         {
             "Effect": "Allow",
-            "Action": "sqs:*",
+            "Action": "sqs:GetQueueAttributes",
             "Resource": "arn:aws:sqs:*:589761922677:assume-role-workload2-queue-*"
         }
     ]