cfn/ddos-fire-extinguisher.yaml [2143:2166]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          - Sid: CreateAndManageSRTRole
            Effect: Allow
            Action:
            - iam:GetRole
            - iam:PassRole
            - iam:ListAttachedRolePolicies
            - iam:CreateRole
            - iam:AttachRolePolicy
            Resource: !Sub "arn:aws:iam::${AWS::AccountId}:role/AWSSRTAccess"
          - Sid: ShieldAdvancedConfiguration
            Effect: Allow
            Action:
            - shield:AssociateSRTLogBucket
            - shield:AssociateSRTRole
            - shield:AssociateProactiveEngagementDetails
            - shield:CreateSubscription
            - shield:DescribeSRTAccess
            - shield:DisableProactiveEngagement
            - shield:DisassociateSRTLogBucket
            - shield:DisassociateSRTRole
            - shield:EnableProactiveEngagement
            - shield:UpdateEmergencyContactSettings
            - shield:UpdateSubscription
            Resource: "*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



cfn/ddos-fire-extinguisher.yaml [2393:2416]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          - Sid: CreateAndManageSRTRole
            Effect: Allow
            Action:
            - iam:GetRole
            - iam:PassRole
            - iam:ListAttachedRolePolicies
            - iam:CreateRole
            - iam:AttachRolePolicy
            Resource: !Sub "arn:aws:iam::${AWS::AccountId}:role/AWSSRTAccess"
          - Sid: ShieldAdvancedConfiguration
            Effect: Allow
            Action:
            - shield:AssociateSRTLogBucket
            - shield:AssociateSRTRole
            - shield:AssociateProactiveEngagementDetails
            - shield:CreateSubscription
            - shield:DescribeSRTAccess
            - shield:DisableProactiveEngagement
            - shield:DisassociateSRTLogBucket
            - shield:DisassociateSRTRole
            - shield:EnableProactiveEngagement
            - shield:UpdateEmergencyContactSettings
            - shield:UpdateSubscription
            Resource: "*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



