From 8b843c31b72eee873a5de7b54b888ee7fc44bce5 Mon Sep 17 00:00:00 2001
From: Hoseong-Seo <hosseo@amazon.com>
Date: Tue, 3 Oct 2023 17:30:02 +0900
Subject: [PATCH] There is an error to create subnet group of RDS. It is added
 a permission of rds:ListTagsForResource for onboarding
 process(saas-boost-svc-onboarding.yaml) to fix it

---
 resources/saas-boost-svc-onboarding.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/resources/saas-boost-svc-onboarding.yaml b/resources/saas-boost-svc-onboarding.yaml
index 75a2a38d..d7fa2861 100644
--- a/resources/saas-boost-svc-onboarding.yaml
+++ b/resources/saas-boost-svc-onboarding.yaml
@@ -713,6 +713,7 @@ Resources:
               - rds:DescribeDBSubnetGroups
               - rds:CreateDBSubnetGroup
               - rds:DeleteDBSubnetGroup
+              - rds:ListTagsForResource
             Resource:
               - !Sub arn:${AWS::Partition}:rds:${AWS::Region}:${AWS::AccountId}:subgrp:sb-${Environment}-*tenant*
           - Effect: Allow