From 25b05ed8a401cb80cea8e7cdebe58a0c8f9f7f58 Mon Sep 17 00:00:00 2001 From: Ben Potter Date: Thu, 2 Mar 2023 12:21:02 -0600 Subject: [PATCH] fix: minimal AWS policy for templates (#6419) --- examples/templates/aws-linux/README.md | 3 ++- examples/templates/aws-windows/README.md | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/examples/templates/aws-linux/README.md b/examples/templates/aws-linux/README.md index 90992fcb18..d3de4e849f 100644 --- a/examples/templates/aws-linux/README.md +++ b/examples/templates/aws-linux/README.md @@ -33,6 +33,8 @@ instances provisioned by Coder: "ec2:GetDefaultCreditSpecification", "ec2:DescribeIamInstanceProfileAssociations", "ec2:DescribeTags", + "ec2:DescribeInstances", + "ec2:DescribeInstanceTypes", "ec2:CreateTags", "ec2:RunInstances", "ec2:DescribeInstanceCreditSpecifications", @@ -46,7 +48,6 @@ instances provisioned by Coder: "Sid": "CoderResources", "Effect": "Allow", "Action": [ - "ec2:DescribeInstances", "ec2:DescribeInstanceAttribute", "ec2:UnmonitorInstances", "ec2:TerminateInstances", diff --git a/examples/templates/aws-windows/README.md b/examples/templates/aws-windows/README.md index ebd59839fc..0bc85b0810 100644 --- a/examples/templates/aws-windows/README.md +++ b/examples/templates/aws-windows/README.md @@ -35,6 +35,8 @@ instances provisioned by Coder: "ec2:GetDefaultCreditSpecification", "ec2:DescribeIamInstanceProfileAssociations", "ec2:DescribeTags", + "ec2:DescribeInstances", + "ec2:DescribeInstanceTypes", "ec2:CreateTags", "ec2:RunInstances", "ec2:DescribeInstanceCreditSpecifications", @@ -48,7 +50,6 @@ instances provisioned by Coder: "Sid": "CoderResources", "Effect": "Allow", "Action": [ - "ec2:DescribeInstances", "ec2:DescribeInstanceAttribute", "ec2:UnmonitorInstances", "ec2:TerminateInstances",