improvement: add ec2:DescribeInternetGateways perms to cluster IAM role

terraform-aws-modules · Jun 9, 2020 · 8317af9 · 8317af9
1 parent e57414c
commit 8317af9
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/cluster.tf b/cluster.tf
@@ -141,7 +141,10 @@ data "aws_iam_policy_document" "cluster_elb_sl_role_creation" {
 
  statement {
  effect = "Allow"
- actions = ["ec2:DescribeAccountAttributes"]
+ actions = [
+ "ec2:DescribeAccountAttributes",
+ "ec2:DescribeInternetGateways"
+ ]
  resources = ["*"]
  }
 }