Merge pull request #6 from adamburns7933/add-risks-to-kms-create-grant

Expand risk of kms:CreateGrant.
primeharbor · Sep 7, 2024 · 35cd28f · 35cd28f
2 parents 41a0e59 + 4df8c10
commit 35cd28f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/actions.yaml b/actions.yaml
@@ -158,6 +158,7 @@ DataAccess:
   - kinesis:GetRecords
   - kinesisvideo:GetImages
   - kinesisvideo:GetMedia
+  - kms:CreateGrant
   - lambda:GetFunction
   - lambda:GetLayerVersion
   - lightsail:GetContainerImages
@@ -230,6 +231,7 @@ PrivEsc:
   - iam:SetDefaultPolicyVersion
   - iam:UpdateAssumeRolePolicy
   - iam:UpdateLoginProfile
+  - kms:CreateGrant
 
 ResourceExposure:
   Actions: