From c39670a5c9cbae5f7879982bc41502341c74c1fc Mon Sep 17 00:00:00 2001 From: Tim Thacker Date: Tue, 6 Oct 2026 00:26:57 +1100 Subject: [PATCH] fix(iac): grant EC2 instance profile inventory reads --- .../cloudformation/nullify-cloudformation-template.json | 1 + .../terraform-v6/modules/nullify-aws-integration/data.tf | 1 + .../terraform/modules/nullify-aws-integration/data.tf | 1 + 3 files changed, 3 insertions(+) diff --git a/aws-integration-setup/cloudformation/nullify-cloudformation-template.json b/aws-integration-setup/cloudformation/nullify-cloudformation-template.json index 8d241bd..95530c7 100644 --- a/aws-integration-setup/cloudformation/nullify-cloudformation-template.json +++ b/aws-integration-setup/cloudformation/nullify-cloudformation-template.json @@ -542,6 +542,7 @@ "iam:ListGroupPolicies", "iam:ListGroups", "iam:ListGroupsForUser", + "iam:ListInstanceProfiles", "iam:ListMFADevices", "iam:ListOpenIDConnectProviders", "iam:ListPolicies", diff --git a/aws-integration-setup/terraform-v6/modules/nullify-aws-integration/data.tf b/aws-integration-setup/terraform-v6/modules/nullify-aws-integration/data.tf index efc29a5..07b2bce 100644 --- a/aws-integration-setup/terraform-v6/modules/nullify-aws-integration/data.tf +++ b/aws-integration-setup/terraform-v6/modules/nullify-aws-integration/data.tf @@ -176,6 +176,7 @@ data "aws_iam_policy_document" "readonly_policy_part2" { "iam:ListGroupPolicies", "iam:ListGroups", "iam:ListGroupsForUser", + "iam:ListInstanceProfiles", "iam:ListMFADevices", "iam:ListOpenIDConnectProviders", "iam:ListPolicies", diff --git a/aws-integration-setup/terraform/modules/nullify-aws-integration/data.tf b/aws-integration-setup/terraform/modules/nullify-aws-integration/data.tf index 12ff65f..0516aca 100644 --- a/aws-integration-setup/terraform/modules/nullify-aws-integration/data.tf +++ b/aws-integration-setup/terraform/modules/nullify-aws-integration/data.tf @@ -200,6 +200,7 @@ data "aws_iam_policy_document" "readonly_policy_part2" { "iam:ListGroupPolicies", "iam:ListGroups", "iam:ListGroupsForUser", + "iam:ListInstanceProfiles", "iam:ListMFADevices", "iam:ListOpenIDConnectProviders", "iam:ListPolicies",