Merge pull request #10 from cloudera/DWX-17748

DWX-17748 Modify cdw-policies to support DescribeInstanceTypes operation
cloudera · Mar 22, 2024 · f3c7e07 · f3c7e07
2 parents 6462a91 + cff13e3
commit f3c7e07
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/aws-iam-policies/docs/restricted-policy-doc-1.json5 b/aws-iam-policies/docs/restricted-policy-doc-1.json5
@@ -198,10 +198,13 @@
         "ec2:CreateTags",
         // Tag subnets and eks security group
         // See footnote 2
-        "ec2:CreateKeyPair"
+        "ec2:CreateKeyPair",
         // Create ssh Public key pair, pass to ec2
         // instances. Not required if passed/set/
         // reused via CB
+        "ec2:DescribeInstanceTypes"
+        // validate whether instance type is supported in a
+        // region or not
       ],
       "Resource": "*"
     },

diff --git a/aws-iam-policies/reduced-permissions-mode.json b/aws-iam-policies/reduced-permissions-mode.json
@@ -140,6 +140,7 @@
                 "ec2:DescribeSubNets",
                 "ec2:DescribeVpcAttribute",
                 "ec2:DescribeVpcs",
+                "ec2:DescribeInstanceTypes",
                 "iam:ListAttachedRolePolicies",
                 "iam:SimulatePrincipalPolicy",
                 "s3:GetBucketLocation",