updated the adminActionNames check actions to remove ssm get document…

…s and replace with ssm get parameters
BishopFox · Sep 23, 2024 · e0dc71b · e0dc71b
1 parent b31f367
commit e0dc71b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aws/iam-simulator.go b/aws/iam-simulator.go
@@ -453,7 +453,7 @@ func (m *IamSimulatorModule) isPrincipalAnAdmin(principal *string) bool {
 		"iam:PutRolePolicy",
 		"iam:AttachRolePolicy",
 		"secretsmanager:GetSecretValue",
-		"ssm:GetDocument",
+		"ssm:GetParameters",
 	}
 	for {
 		SimulatePrincipalPolicy, err := m.IAMClient.SimulatePrincipalPolicy(