fix: add to readme required ec2:DescribeRegions permission

jtblin · Aug 6, 2022 · e87d5af · e87d5af
1 parent cacff76
commit e87d5af
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -33,7 +33,8 @@ so that it can call the EC2 metadata API itself.
 
 ### IAM roles
 
-It is necessary to create an IAM role which can assume other roles and assign it to each kubernetes worker.
+It is necessary to create an IAM role which can assume other roles and assign it to each kubernetes worker and list regions.  
+List regions required permissions because aws-go-sdk-v2 doesn't include regions list.  
 
 ```
 {
@@ -45,7 +46,14 @@ It is necessary to create an IAM role which can assume other roles and assign it
       ],
       "Effect": "Allow",
       "Resource": "*"
-    }
+    },
+    {
+      "Action": [
+        "ec2:DescribeRegions"
+      ],
+      "Effect": "Allow",
+      "Resource": "*"
+    },
   ]
 }
 ```