Merge pull request #236 from litl/jbardin-iam

Update galaxy IAM role policy
litl · Apr 27, 2015 · 52bb803 · 52bb803
2 parents 603e00f + 1f1ba8d
commit 52bb803
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/stack/galaxy_cloudformation.go b/stack/galaxy_cloudformation.go
@@ -318,6 +318,15 @@ var galaxyTmpl = `{{ $stackName := .Name }}{
                                     "Effect": "Allow",
                                     "NotAction": "iam:*",
                                     "Resource": "*"
+                                },
+                                {
+                                    "Effect": "Allow",
+                                    "Action": [
+                                        "iam:ListServerCertificates",
+                                        "iam:ListInstanceProfiles",
+                                        "iam:PassRole"
+                                    ],
+                                    "Resource": "*"
                                 }
                             ],
                             "Version": "2012-10-17"