Bugfix: add ModifyVpcAttribute and DescribeVolumes permissions (#820)

* Bugfix: add ModifyVpcAttribute permissions Signed-off-by: guohaowang <wangguohao.2009@gmail.com> * Bugfix: add ec2:DescribeVolumes permissions Signed-off-by: guohaowang <wangguohao.2009@gmail.com>
kubernetes-sigs · Jun 11, 2019 · 77da568 · 77da568
1 parent e2abf2f
commit 77da568
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/cloud/aws/services/cloudformation/bootstrap.go b/pkg/cloud/aws/services/cloudformation/bootstrap.go
@@ -158,6 +158,7 @@ func controllersPolicy(accountID string) *iam.PolicyDocument {
 					"ec2:CreateSubnet",
 					"ec2:CreateTags",
 					"ec2:CreateVpc",
+					"ec2:ModifyVpcAttribute",
 					"ec2:DeleteInternetGateway",
 					"ec2:DeleteNatGateway",
 					"ec2:DeleteRouteTable",
@@ -177,6 +178,7 @@ func controllersPolicy(accountID string) *iam.PolicyDocument {
 					"ec2:DescribeSecurityGroups",
 					"ec2:DescribeSubnets",
 					"ec2:DescribeVpcs",
+					"ec2:DescribeVolumes",
 					"ec2:DetachInternetGateway",
 					"ec2:DisassociateRouteTable",
 					"ec2:ModifyInstanceAttribute",