prowler-additions-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "account:Get*",
                "appstream:DescribeFleets",
                "ds:Get*",
                "ds:Describe*",
                "ds:List*",
                "ec2:GetEbsEncryptionByDefault",
                "ecr:Describe*",
                "elasticfilesystem:DescribeBackupPolicy",
                "glue:GetConnections",
                "glue:GetSecurityConfiguration",
                "glue:SearchTables",
                "lambda:GetFunction",
                "s3:GetAccountPublicAccessBlock",
                "shield:DescribeProtection",
                "shield:GetSubscriptionState",
                "ssm:GetDocument",
                "support:Describe*",
                "tag:GetTagKeys"
            ],
            "Resource": "*",
            "Effect": "Allow",
            "Sid": "AllowMoreReadForProwler"
        },
        {
            "Effect": "Allow",
            "Action": [
                "apigateway:GET"
            ],
            "Resource": [
                "arn:aws:apigateway:*::/restapis/*"
            ]
        }
    ]
}