2.198.0

cado-security · Nov 15, 2024 · 4e8ce3a · 4e8ce3a
1 parent 3925c04
commit 4e8ce3a
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/aws_v2/modules/iam/main.tf b/aws_v2/modules/iam/main.tf
@@ -82,6 +82,14 @@ resource "aws_iam_role_policy" "instance_policy" {
             ],
             "Resource": "arn:aws:iam::*:role/*CadoResponse*"
         },
+        {
+            "Sid": "RequiredForStartup",
+            "Effect": "Allow",
+            "Action": [
+                "ec2:DescribeInstances"
+            ],
+            "Resource": "*"
+        },
         {
             "Sid": "RequiredForSecretsManagement",
             "Effect": "Allow",
@@ -110,7 +118,6 @@ resource "aws_iam_role_policy" "instance_policy" {
                 "ec2:StopInstances",
                 "ec2:StartInstances",
                 "ec2:RunInstances",
-                "ec2:DescribeInstances",
                 "ec2:DescribeInstanceStatus",
                 "ec2:CreateTags",
                 "ec2:DescribeAddresses",
@@ -137,7 +144,9 @@ resource "aws_iam_role_policy" "instance_policy" {
                 "ec2:DetachVolume",
                 "ec2:StopInstances",
                 "ec2:StartInstances",
-                "ec2:DescribeInstances",
+                "ec2:RunInstances",
+                "ec2:CreateTags",
+                "ec2:DescribeInstanceStatus",
                 "ec2:DescribeAddresses",
                 "ec2:AssociateAddress",
                 "ec2:DescribeImages",