fix: Allow TagUser to SelfManagement policy (terraform-aws-modules#287)

chpl · Oct 12, 2022 · 87624b6 · 87624b6
1 parent c6adf42
commit 87624b6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/modules/iam-group-with-policies/policies.tf b/modules/iam-group-with-policies/policies.tf
@@ -39,6 +39,9 @@ data "aws_iam_policy_document" "iam_self_management" {
       "iam:UpdateUser",
       "iam:UploadSigningCertificate",
       "iam:UploadSSHPublicKey",
+      "iam:TagUser",
+      "iam:ListUserTags",
+      "iam:UntagUser",
     ]
 
     # Allow for both users with "path" and without it