From 0d2952f905512ec3983d6f6be663995ec9420c70 Mon Sep 17 00:00:00 2001
From: Pat Heard <patrick.heard@cds-snc.ca>
Date: Thu, 26 Sep 2024 10:33:01 -0400
Subject: [PATCH] fix: add missing SupportCenter-Admin permissions (#309)

Update the permissions to allow the opt-out phone number
lists to load without errors in the AWS console.
---
 .../org_account/iam_identity_center/common_permissions.tf     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/terragrunt/org_account/iam_identity_center/common_permissions.tf b/terragrunt/org_account/iam_identity_center/common_permissions.tf
index 1d249a90..9248c678 100644
--- a/terragrunt/org_account/iam_identity_center/common_permissions.tf
+++ b/terragrunt/org_account/iam_identity_center/common_permissions.tf
@@ -96,9 +96,13 @@ data "aws_iam_policy_document" "admin_support_center" {
     sid    = "PinpointListAndDeleteOptedOutNumbers"
     effect = "Allow"
     actions = [
+      "sms-voice:GetResourcePolicy",
       "sms-voice:DeleteOptedOutNumber",
+      "sms-voice:DescribePhoneNumbers",
       "sms-voice:DescribeOptOutLists",
       "sms-voice:DescribeOptedOutNumbers",
+      "sms-voice:DescribeRegistrations",
+      "sms-voice:ListTagsForResource",
       "sms-voice:PutOptedOutNumber"
     ]
     resources = ["*"]