Merge pull request #211 from tremble/networkfirewall/service-role

Allow creation of the NetworkFirewall service role
mattclay · May 18, 2022 · c7f8fe9 · c7f8fe9
2 parents 30efc5f + cd94251
commit c7f8fe9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/aws/policy/security-services.yaml b/aws/policy/security-services.yaml
@@ -171,10 +171,12 @@ Statement:
       - 'arn:aws:iam::{{ aws_account_id }}:role/aws-service-role/spot.amazonaws.com/*'
       - 'arn:aws:iam::{{ aws_account_id }}:role/aws-service-role/eks-fargate.amazonaws.com/*'
       - 'arn:aws:iam::{{ aws_account_id }}:role/aws-service-role/transitgateway.amazonaws.com/*'
+      - 'arn:aws:iam::{{ aws_account_id }}:role/aws-service-role/network-firewall.amazonaws.com/*'
     Condition:
       ForAnyValue:StringEquals:
         iam:AWSServiceName:
           - 'autoscaling.amazonaws.com'
           - 'spot.amazonaws.com'
           - 'eks-fargate.amazonaws.com'
           - 'transitgateway.amazonaws.com'
+          - 'network-firewall.amazonaws.com'