Skip to content

Instantly share code, notes, and snippets.

@mattfysh
Created December 12, 2023 22:44
Show Gist options
  • Save mattfysh/1044cd7c4c99bd5aa06a684389e91f58 to your computer and use it in GitHub Desktop.
Save mattfysh/1044cd7c4c99bd5aa06a684389e91f58 to your computer and use it in GitHub Desktop.
Danger, Will Robinson!
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"iam:*",
"eks:*",
"ec2:*",
"autoscaling:*",
"cloudformation:*"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"aws:ResourceTag/user:Project": "eks_proto"
}
}
},
{
"Effect": "Allow",
"Action": ["tag:*", "ec2:CreateTags"],
"Resource": "*",
"Condition": {
"StringEquals": {
"aws:RequestTag/user:Project": "eks_proto"
}
}
},
{
"Effect": "Allow",
"Action": [
"ec2:DescribeAvailabilityZones",
"ec2:Create*",
"ec2:Describe*",
"autoscaling:Describe*",
"ec2:AllocateAddress",
"ssm:GetParameter",
"eks:Describe*",
"ec2:DisassociateAddress"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": ["iam:PassRole"],
"Resource": [
"arn:aws:iam:::role/eks-cluster-instanceRole-role-*",
"arn:aws:iam:::role/eks-cluster-eksRole-role-*"
]
},
{
"Effect": "Allow",
"Action": ["autoscaling:*"],
"Resource": "arn:aws:autoscaling:::launchConfiguration:*:launchConfigurationName/eks-cluster-nodeLaunchConfiguration-*"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment