Add additional IAM permissions required for scaling ASGs from 0

b6a6ad79 · Rob Greenwood · 19be3cdb · b6a6ad79
Commit b6a6ad79 authored Mar 11, 2019 by Rob Greenwood
Hide whitespace changes
Inline Side-by-side

Showing with 7 additions and 2 deletions

iam.tf iam.tf +7 -2

No files found.
--- a/iam.tf
+++ b/iam.tf
@@ -24,14 +24,19 @@ data "aws_iam_policy_document" "ec2_assume" {

 data "aws_iam_policy_document" "autoscaler" {
  statement {
-    actions = ["autoscaling:DescribeAutoScalingGroups",
+    actions = [
+      "autoscaling:DescribeAutoScalingGroups",
      "autoscaling:DescribeAutoScalingInstances",
      "autoscaling:SetDesiredCapacity",
      "autoscaling:TerminateInstanceInAutoScalingGroup",
      "autoscaling:DescribeTags",
+      "autoscaling:DescribeLaunchConfigurations",
+      "ec2:DescribeLaunchTemplateVersions", 
    ]

-    resources = ["*"]
+    resources = [
+      "*"
+    ]
  }
 }