From 9834a319b298c88b17c40c26cc8a9faecddb59e6 Mon Sep 17 00:00:00 2001
From: Panther Bot <github-service-account-automation@panther.io>
Date: Tue, 14 Jan 2025 12:34:46 +0000
Subject: [PATCH] Automated - Syncing changes in templates from
 panther-enterprise

---
 cloudformation/panther-deployment-role.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cloudformation/panther-deployment-role.yml b/cloudformation/panther-deployment-role.yml
index 2ce8a3a..9092ed3 100644
--- a/cloudformation/panther-deployment-role.yml
+++ b/cloudformation/panther-deployment-role.yml
@@ -206,6 +206,7 @@ Resources:
               - codebuild:DeleteProject
               - codebuild:UpdateProject
               - codebuild:StartBuild
+              - codebuild:RetryBuild
             Resource: !Sub arn:${AWS::Partition}:codebuild:${AWS::Region}:${AWS::AccountId}:project/panther*
           - Sid: PantherRedshiftProvisioningServiceLinkedRole
             Effect: Allow
@@ -538,6 +539,7 @@ Resources:
               - logs:DeleteLogGroup
               - logs:PutRetentionPolicy
               - logs:PutSubscriptionFilter
+              - logs:DeleteSubscriptionFilter
               - logs:TagLogGroup
               - logs:TagResource
               - logs:UntagLogGroup