Added permission to codebuild-role in the deployment account to read …

…AWS Organizations
javydekoning · Aug 9, 2024 · 1a495bd · 1a495bd
1 parent 2d55d2c
commit 1a495bd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml
@@ -320,6 +320,7 @@ Resources:
               - "sts:AssumeRole"
             Resource:
               - !Sub arn:${AWS::Partition}:iam::*:role/adf-readonly-automation-role
+              - !Sub arn:${AWS::Partition}:iam::*:role/adf/organizations/adf-organizations-readonly
             Condition:
               StringEquals:
                 aws:PrincipalOrgID: !Ref OrganizationId