fix: Add "ec2:DescribeTags" IAM permission for api-gateway-controller (#254)

csantanapr · web-flow · commit 65edd4cd6a65 · 2023-09-21T09:37:26.000-04:00
Signed-off-by: Carlos Santana &lt;csantana23@gmail.com&gt;
diff --git a/main.tf b/main.tf
@@ -3522,7 +3522,8 @@ data "aws_iam_policy_document" "aws_gateway_api_controller" {
       "vpc-lattice:*",
       "iam:CreateServiceLinkedRole",
       "ec2:DescribeVpcs",
-      "ec2:DescribeSubnets"
+      "ec2:DescribeSubnets",
+      "ec2:DescribeTags"
     ]
     resources = ["*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -3522,7 +3522,8 @@ data "aws_iam_policy_document" "aws_gateway_api_controller" {`
`3522`	`3522`	`"vpc-lattice:*",`
`3523`	`3523`	`"iam:CreateServiceLinkedRole",`
`3524`	`3524`	`"ec2:DescribeVpcs",`
`3525`		`- "ec2:DescribeSubnets"`
	`3525`	`+ "ec2:DescribeSubnets",`
	`3526`	`+ "ec2:DescribeTags"`
`3526`	`3527`	`]`
`3527`	`3528`	`resources = ["*"]`
`3528`	`3529`	`}`