Add identityStore:DeleteGroup IAM permission

This action is performed during the sync: https://github.com/awslabs/ssosync/blob/955e8e23a42340d323e25659c8c03130b5609c80/internal/sync.go#L511 But the template does not give the IAM role permission to delete groups: https://github.com/awslabs/ssosync/blob/b4352b919996c0dfd4fad03c0e7a8000e5fd5f88/template.yaml#L164 Resolves awslabs#116.
fac · Jan 12, 2023 · 399a614 · 399a614
1 parent fbeffd1
commit 399a614
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/template.yaml b/template.yaml
@@ -170,6 +170,7 @@ Resources:
                 - "identitystore:IsMemberInGroups"
                 - "identitystore:GetGroupMembershipId"
                 - "identitystore:DeleteGroupMembership"
+                - "identitystore:DeleteGroup"
               Resource:
                 - "*"
       Events: