Przeglądaj źródła

consolidating roles (#2696)

Stefan McShane 3 lat temu
rodzic
commit
a72ea09499
1 zmienionych plików z 16 dodań i 4 usunięć
  1. 16 4
      docs/getting-started/aws.md

+ 16 - 4
docs/getting-started/aws.md

@@ -39,15 +39,20 @@ Copy and paste the below JSON to the field.
       "Effect": "Allow",
       "Action": [
         "autoscaling:AttachInstances",
+        "autoscaling:CancelInstanceRefresh",
+        "autoscaling:CompleteLifecycleAction",
         "autoscaling:CreateAutoScalingGroup",
         "autoscaling:CreateLaunchConfiguration",
         "autoscaling:CreateOrUpdateTags",
         "autoscaling:DeleteAutoScalingGroup",
         "autoscaling:DeleteLaunchConfiguration",
+        "autoscaling:DeleteLifecycleHook",
         "autoscaling:DeleteTags",
         "autoscaling:Describe*",
         "autoscaling:DetachInstances",
+        "autoscaling:PutLifecycleHook",
         "autoscaling:SetDesiredCapacity",
+        "autoscaling:StartInstanceRefresh",
         "autoscaling:UpdateAutoScalingGroup",
         "autoscaling:SuspendProcesses",
         "ec2:AllocateAddress",
@@ -106,6 +111,7 @@ Copy and paste the below JSON to the field.
         "ec2:GetLaunchTemplateData",
         "ec2:ModifyLaunchTemplate",
         "ec2:RunInstances",
+        "ecr:*",
         "eks:CreateCluster",
         "eks:DeleteCluster",
         "eks:DescribeCluster",
@@ -126,6 +132,12 @@ Copy and paste the below JSON to the field.
         "eks:ListNodegroups",
         "eks:UpdateNodegroupConfig",
         "eks:UpdateNodegroupVersion",
+        "events:PutRule",
+        "events:PutTargets",
+        "events:ListTargetsByRule",
+        "events:DescribeRule",
+        "events:DeleteRule",
+        "events:RemoveTargets",
         "eks:AssociateEncryptionConfig",
         "iam:AddRoleToInstanceProfile",
         "iam:AttachRolePolicy",
@@ -157,13 +169,17 @@ Copy and paste the below JSON to the field.
         "iam:TagRole",
         "iam:UntagRole",
         "iam:UpdateAssumeRolePolicy",
+        "lambda:*",
         "logs:CreateLogGroup",
+        "logs:CreateLogStream",
         "logs:DescribeLogGroups",
         "logs:DeleteLogGroup",
         "logs:ListTagsLogGroup",
+        "logs:PutLogEvents",
         "logs:PutRetentionPolicy",
         "kms:CreateAlias",
         "kms:CreateGrant",
+        "kms:Get*",
         "kms:CreateKey",
         "kms:DeleteAlias",
         "kms:DescribeKey",
@@ -174,12 +190,8 @@ Copy and paste the below JSON to the field.
         "kms:ListResourceTags",
         "kms:ScheduleKeyDeletion",
         "kms:TagResource",
-<<<<<<< Updated upstream
-        "kms:UntagResource"
-=======
         "kms:UntagResource",
         "kms:EnableKeyRotation"
->>>>>>> Stashed changes
       ],
       "Resource": "*"
     }