Skip to content

Commit 48b37df

Browse files
committed
OSDOCS-1047 updating AWS permissions
1 parent 7e5f3c1 commit 48b37df

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

modules/installation-aws-permissions.adoc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,7 @@ cluster, the IAM user requires the following permissions:
5050
* `ec2:DescribeVpcClassicLinkDnsSupport`
5151
* `ec2:DescribeVpcEndpoints`
5252
* `ec2:DescribeVpcs`
53+
* `ec2:GetEbsDefaultKmsKeyId`
5354
* `ec2:ModifyInstanceAttribute`
5455
* `ec2:ModifyNetworkInterfaceAttribute`
5556
* `ec2:ReleaseAddress`
@@ -141,6 +142,7 @@ If you use an existing VPC, your account does not require these permissions for
141142
* `s3:CreateBucket`
142143
* `s3:DeleteBucket`
143144
* `s3:GetAccelerateConfiguration`
145+
* `s3:GetBucketAcl`
144146
* `s3:GetBucketCors`
145147
* `s3:GetBucketLocation`
146148
* `s3:GetBucketLogging`
@@ -174,10 +176,13 @@ If you use an existing VPC, your account does not require these permissions for
174176
* `ec2:DeleteVolume`
175177
* `elasticloadbalancing:DeleteTargetGroup`
176178
* `elasticloadbalancing:DescribeTargetGroups`
179+
* `iam:DeleteAccessKey`
180+
* `iam:DeleteUser`
177181
* `iam:ListInstanceProfiles`
178182
* `iam:ListRolePolicies`
179183
* `iam:ListUserPolicies`
180184
* `s3:DeleteObject`
185+
* `s3:ListBucketVersions`
181186
* `tag:GetResources`
182187

183188
.Required permissions to delete network resources

0 commit comments

Comments
 (0)