feat: add permissions for karpenter

streamnative · Dec 30, 2024 · 9586104 · 9586104
1 parent a8672eb
commit 9586104
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/modules/aws/vendor-access/files/permission_boundary_iam_policy.json.tpl b/modules/aws/vendor-access/files/permission_boundary_iam_policy.json.tpl
@@ -7,6 +7,7 @@
       "Action": [
           "acm:*",
           "autoscaling:*",
+          "cloudwatch:*",
           "cognito-idp:*",
           "dynamodb:*",
           "ec2:*",
@@ -17,16 +18,17 @@
           "iam:List*",
           "kms:*",
           "logs:*",
+          "pricing:*"
           "route53:*",
           "s3:*",
           "servicequotas:*",
           "shield:*",
-          "support:*",
+          "sqs:*",
+          "ssm:*",
           "sts:*",
+          "support:*",
           "waf-regional:*",
-          "wafv2:*",
-          "cloudwatch:*",
-          "pricing:*"
+          "wafv2:*"
       ],
       "Resource": "*"
     },
@@ -94,7 +96,7 @@
       }
     },
     {
-      "Sid": "RestrictPassRoleToEKS",
+      "Sid": "RestrictPassRole",
       "Effect": "Allow",
       "Action": [
         "iam:PassRole"