prowler-additions-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "access-analyzer:List*",
                "apigateway:Get*",
                "apigatewayv2:Get*",
                "aws-marketplace:ViewSubscriptions",
                "dax:ListTables",
                "ds:ListAuthorizedApplications",
                "ds:DescribeRoles",
                "ec2:GetEbsEncryptionByDefault",
                "ecr:Describe*",
                "lambda:GetAccountSettings",
                "lambda:GetFunctionConfiguration",
                "lambda:GetLayerVersionPolicy",
                "lambda:GetPolicy",
                "opsworks-cm:Describe*",
                "opsworks:Describe*",
                "secretsmanager:ListSecretVersionIds",
                "sns:List*",
                "sqs:ListQueueTags",
                "states:ListActivities",
                "support:Describe*",
                "tag:GetTagKeys"
            ],
            "Resource": "*",
            "Effect": "Allow",
            "Sid": "AllowMoreReadForProwler"
        }
    ]
}