Add read-only access for MSK and Opensearch (#39)

DuckbillGroup · Feb 7, 2025 · b3c9a83 · b3c9a83
1 parent 3e856be
commit b3c9a83
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/resource-discovery-policy.json b/resource-discovery-policy.json
@@ -28,15 +28,18 @@
                 "elasticbeanstalk:ListTagsForResource",
                 "elasticfilesystem:Describe*",
                 "elasticmapreduce:Describe*",
-                "es:ListTags",
-                "es:DescribeReservedElasticsearchInstances",
+                "es:Describe*",
+                "es:Get*",
+                "es:List*",
                 "fsx:Describe*",
                 "glue:Get*",
                 "glue:List*",
                 "health:Describe*",
                 "iam:GetPolicyVersion",
                 "iam:GetRole",
                 "iam:GetUser",
+                "kafka:Describe*",
+                "kafka:Get*",
                 "kafka:List*",
                 "kinesis:Describe*",
                 "kinesis:List*",