diff --git a/src/aws.go b/src/aws.go index 9bbb9c53..901e9c15 100644 --- a/src/aws.go +++ b/src/aws.go @@ -314,6 +314,8 @@ func GetAWSResourcePermissions(result ResourceV2) ([]string, error) { "aws_sagemaker_endpoint_configuration": awsSagemakerEndpointConfiguration, "aws_sagemaker_model": awsSagemakerModel, "aws_sqs_queue_redrive_allow_policy": awsSqsQueueRedriveAllowPolicy, + "aws_ec2_transit_gateway_vpc_attachment": awsEc2TransitGatewayVpcAttachment, + "aws_vpc_endpoint_route_table_association": awsVpcEndpointRouteTableAssociation, } var Permissions []string diff --git a/src/aws_datasource.go b/src/aws_datasource.go index 33affb37..2730963f 100644 --- a/src/aws_datasource.go +++ b/src/aws_datasource.go @@ -101,6 +101,7 @@ func GetAWSDataPermissions(result ResourceV2) ([]string, error) { "aws_location_tracker_association": dataAwsLocationTrackerAssociation, "aws_location_tracker_associations": dataAwsLocationTrackerAssociations, "aws_workspaces_bundle": dataAwsWorkspacesBundle, + "aws_route_table": dataAwsRouteTable, } var Permissions []string diff --git a/src/files.go b/src/files.go index 7feb9294..73de2716 100644 --- a/src/files.go +++ b/src/files.go @@ -792,3 +792,9 @@ var awsSagemakerModel []byte //go:embed mapping/aws/resource/sqs/aws_sqs_queue_redrive_allow_policy.json var awsSqsQueueRedriveAllowPolicy []byte + +//go:embed mapping/aws/resource/ec2/aws_ec2_transit_gateway_vpc_attachment.json +var awsEc2TransitGatewayVpcAttachment []byte + +//go:embed mapping/aws/resource/ec2/aws_vpc_endpoint_route_table_association.json +var awsVpcEndpointRouteTableAssociation []byte diff --git a/src/files_datasource.go b/src/files_datasource.go index f713e81d..b693b43a 100644 --- a/src/files_datasource.go +++ b/src/files_datasource.go @@ -228,3 +228,6 @@ var dataAwsLocationTrackerAssociations []byte //go:embed mapping/aws/data/workspaces/aws_workspaces_bundle.json var dataAwsWorkspacesBundle []byte + +//go:embed mapping/aws/data/ec2/aws_route_table.json +var dataAwsRouteTable []byte diff --git a/src/mapping/aws/data/ec2/aws_route_table.json b/src/mapping/aws/data/ec2/aws_route_table.json new file mode 100644 index 00000000..d5be1aa7 --- /dev/null +++ b/src/mapping/aws/data/ec2/aws_route_table.json @@ -0,0 +1,13 @@ +[ + { + "apply": [ + "ec2:DescribeRouteTables" + ], + "attributes": { + "tags": [] + }, + "destroy": [], + "modify": [], + "plan": [] + } +] diff --git a/src/mapping/aws/resource/ec2/aws_ec2_transit_gateway_vpc_attachment.json b/src/mapping/aws/resource/ec2/aws_ec2_transit_gateway_vpc_attachment.json new file mode 100644 index 00000000..1653da9c --- /dev/null +++ b/src/mapping/aws/resource/ec2/aws_ec2_transit_gateway_vpc_attachment.json @@ -0,0 +1,21 @@ +[ + { + "apply": [ + "ec2:CreateTransitGatewayVpcAttachment", + "ec2:DescribeTransitGatewayVpcAttachments", + "ec2:DescribeTransitGateways", + "ec2:DeleteTransitGatewayVpcAttachment" + ], + "attributes": { + "tags": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ] + }, + "destroy": [ + "ec2:DeleteTransitGatewayVpcAttachment" + ], + "modify": [], + "plan": [] + } +] diff --git a/src/mapping/aws/resource/ec2/aws_vpc_endpoint_route_table_association.json b/src/mapping/aws/resource/ec2/aws_vpc_endpoint_route_table_association.json new file mode 100644 index 00000000..5ce4857e --- /dev/null +++ b/src/mapping/aws/resource/ec2/aws_vpc_endpoint_route_table_association.json @@ -0,0 +1,14 @@ +[ + { + "apply": [ + "ec2:ModifyVpcEndpoint", + "ec2:DescribeVpcEndpoints" + ], + "attributes": { + "tags": [] + }, + "destroy": [], + "modify": [], + "plan": [] + } +]