Automated - Syncing changes in templates from panther-enterprise

panther-labs · Jan 14, 2025 · 9834a31 · 9834a31
1 parent 7383354
commit 9834a31
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cloudformation/panther-deployment-role.yml b/cloudformation/panther-deployment-role.yml
@@ -206,6 +206,7 @@ Resources:
               - codebuild:DeleteProject
               - codebuild:UpdateProject
               - codebuild:StartBuild
+              - codebuild:RetryBuild
             Resource: !Sub arn:${AWS::Partition}:codebuild:${AWS::Region}:${AWS::AccountId}:project/panther*
           - Sid: PantherRedshiftProvisioningServiceLinkedRole
             Effect: Allow
@@ -538,6 +539,7 @@ Resources:
               - logs:DeleteLogGroup
               - logs:PutRetentionPolicy
               - logs:PutSubscriptionFilter
+              - logs:DeleteSubscriptionFilter
               - logs:TagLogGroup
               - logs:TagResource
               - logs:UntagLogGroup