fixes incorrect AssumeRole policy (#5555)

This commit is contained in:
Robin Beck authored and GitHub committed 2025-02-21 12:32:57 -07:00
1 parent 14808d197f
commit 11c19d574f
1 file changed
+6 -22
@@ -91,29 +91,13 @@ Perform the following steps to set up a host catalog using [AssumeRole](https://
{
"Effect": "Allow",
"Action": [
"ec2:Describe*",
"ec2:GetSecurityGroupsForVpc"
"sts:AssumeRole"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "elasticloadbalancing:Describe*",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"cloudwatch:ListMetrics",
"cloudwatch:GetMetricStatistics",
"cloudwatch:Describe*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "autoscaling:Describe*",
"Resource": "*"
"Principal": {
"Service": [
"ec2.amazonaws.com"
]
}
}
]
}