Add more permissions that packer needs (#748)

Signed-off-by: Stavros Foteinopoulos <[email protected]>
mattermost · Sep 30, 2024 · 7b254ec · 7b254ec
1 parent 9c618c9
commit 7b254ec
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/aws/iam-custom-resources/packer.tf b/aws/iam-custom-resources/packer.tf
@@ -72,6 +72,7 @@ resource "aws_iam_policy" "packer" {
               "autoscaling:UpdateAutoScalingGroup",
               "autoscaling:PutLifecycleHook",
               "autoscaling:StartInstanceRefresh",
+              "ec2:AssociateAddress",
               "ec2:AttachVolume",
               "ec2:AuthorizeSecurityGroupIngress",
               "ec2:CopyImage",
@@ -87,11 +88,15 @@ resource "aws_iam_policy" "packer" {
               "ec2:DeleteSnapshot",
               "ec2:DeleteVolume",
               "ec2:DeregisterImage",
+              "ec2:DescribeAddresses",
+              "ec2:DescribeAddressesAttribute",
               "ec2:DescribeImageAttribute",
               "ec2:DescribeImages",
               "ec2:DescribeInstanceStatus",
               "ec2:DescribeInstances",
               "ec2:DescribeInstanceTypes",
+              "ec2:DescribeInstanceAttribute",
+              "ec2:DescribeInstanceCreditSpecifications",
               "ec2:DescribeKeyPairs",
               "ec2:DescribeLaunchTemplateVersions",
               "ec2:DescribeLaunchTemplates",
@@ -106,6 +111,7 @@ resource "aws_iam_policy" "packer" {
               "ec2:DescribeVpcAttribute",
               "ec2:DescribeVpcs",
               "ec2:DetachVolume",
+              "ec2:DisassociateAddress",
               "ec2:GetPasswordData",
               "ec2:ModifyImageAttribute",
               "ec2:ModifyInstanceAttribute",