Update provisioner IAM policy
NixOps now uses the DescribeIamInstanceProfileAssociations API, so we need to allow that. For reference, the policy was updated via $ aws iam create-policy-version --region us-east-1 --policy-arn arn:aws:iam::080433136561:policy/hydra-provisioner-201709041653 --policy-document file://hydra-provisioner/policy.json --set-as-default
Eelco Dolstra committed
Jun 20, 2018 at 15:02 UTC
251de3f83b077bc90dcaf2e75b1b0556a6324ace
1 file changed
+2
-1
hydra-provisioner/policy.json
+2
-1
@@ -13,7 +13,8 @@
13
"ec2:DescribeImages",
14
"ec2:DescribeInstanceStatus",
15
"ec2:RequestSpotInstances",
16
- "ec2:CancelSpotInstanceRequests"
16
+ "ec2:CancelSpotInstanceRequests",
17
+ "ec2:DescribeIamInstanceProfileAssociations"
18
],
19
"Resource": [
20
"*"