feat: added controltower LZ permissions for replicator

Author: malhussan

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v0.6.0]
+
+### Added
+
+- Added permissions to allow replicator to list and get landing zones in AWS Control Tower.
+
 ## [v0.5.1]
 
 ### Changed
@@ -54,10 +60,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Initial Release
 
-[unreleased]: https://github.com/meshcloud/terraform-aws-meshplatform/compare/v0.5.1...HEAD
+[unreleased]: https://github.com/meshcloud/terraform-aws-meshplatform/compare/v0.6.0...HEAD
 [v0.1.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.1.0
 [v0.2.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.2.0
 [v0.3.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.3.0
 [v0.4.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.4.0
 [v0.5.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.5.0
 [v0.5.1]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.5.1
+[v0.6.0]: https://github.com/meshcloud/terraform-aws-meshplatform/releases/tag/v0.6.0

modules/meshcloud-replicator/replicator-management-account-access/data.tf

@@ -213,6 +213,8 @@ data "aws_iam_policy_document" "meshfed_service_enrollment_additional" {
       "controltower:CreateManagedAccount",
       "controltower:DescribeManagedAccount",
       "controltower:DeregisterManagedAccount",
+      "controltower:ListLandingZones",
+      "controltower:GetLandingZone",
       "s3:GetObject",
       "organizations:describeOrganization",
       "sso:DescribeRegisteredRegions"