Automated - Syncing changes in templates from panther-enterprise

panther-labs · Jan 22, 2025 · 563cc52 · 563cc52
1 parent 827e545
commit 563cc52
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cloudformation/panther-deployment-role.yml b/cloudformation/panther-deployment-role.yml
@@ -86,6 +86,7 @@ Resources:
           - Sid: AWSRequiredStarCalls
             Effect: Allow
             Action:
+              - cloudfront:UpdateDistribution # Required for API Gateway Domain name creation
               - ecs:CreateCluster
               - ecs:DeregisterTaskDefinition
               - kms:CreateKey
@@ -285,6 +286,7 @@ Resources:
             Resource:
               - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/account
               - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/apis*
+              - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/domainnames*
               - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/restapis*
               - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/tags/*
               - !Sub arn:${AWS::Partition}:apigateway:${AWS::Region}::/usageplans*