Lightsail to CloudFormation (#14337)

* Lightsail to CloudFormation * Update deploy-from-ansible.md
trailofbits · Dec 14, 2021 · c759d75 · c759d75
1 parent 1bf8a40
commit c759d75
Show file tree

Hide file tree

Showing 6 changed files with 115 additions and 580 deletions.
diff --git a/docs/deploy-from-ansible.md b/docs/deploy-from-ansible.md
@@ -242,7 +242,25 @@ Possible options can be gathered via cli `aws lightsail get-regions`
                 "lightsail:GetRegions",
                 "lightsail:GetInstance",
                 "lightsail:CreateInstances",
-                "lightsail:OpenInstancePublicPorts"
+                "lightsail:DisableAddOn",
+                "lightsail:PutInstancePublicPorts",
+                "lightsail:StartInstance",
+                "lightsail:GetStaticIp",
+                "lightsail:AllocateStaticIp",
+                "lightsail:AttachStaticIp"
+            ],
+            "Resource": [
+                "*"
+            ]
+        },
+        {
+            "Sid": "DeployCloudFormationStack",
+            "Effect": "Allow",
+            "Action": [
+                "cloudformation:CreateStack",
+                "cloudformation:DescribeStacks",
+                "cloudformation:DescribeStackEvents",
+                "cloudformation:ListStackResources"
             ],
             "Resource": [
                 "*"