Better policy

dex4er · Feb 5, 2024 · a35c678 · a35c678
1 parent 9f542a1
commit a35c678
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -79,12 +79,18 @@ This lambda function needs the following permissions:
     {
       "Effect": "Allow",
       "Action": [
-        "elasticloadbalancing:DeregisterTargets",
         "elasticloadbalancing:DescribeTargetGroups",
-        "elasticloadbalancing:DescribeTargetHealth",
-        "elasticloadbalancing:RegisterTargets"
+        "elasticloadbalancing:DescribeTargetHealth"
       ],
       "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "elasticloadbalancing:DeregisterTargets",
+        "elasticloadbalancing:RegisterTargets"
+      ],
+      "Resource": "arn:aws:elasticloadbalancing:REGION:ACCOUNTID:targetgroup/NAME/NNN"
     }
   ]
 }