Update Lightsail required IAM permissions (#14438)

2 years ago · 59672d476d
parent ed01f30949
commit 59672d476d
1 changed files with 2 additions and 0 deletions
--- a/docs/deploy-from-ansible.md
+++ b/docs/deploy-from-ansible.md
@ -248,6 +248,7 @@ Possible options can be gathered via cli `aws lightsail get-regions`
                "lightsail:DisableAddOn",
                "lightsail:PutInstancePublicPorts",
                "lightsail:StartInstance",
+                "lightsail:TagResource",
                "lightsail:GetStaticIp",
                "lightsail:AllocateStaticIp",
                "lightsail:AttachStaticIp"
@ -261,6 +262,7 @@ Possible options can be gathered via cli `aws lightsail get-regions`
            "Effect": "Allow",
            "Action": [
                "cloudformation:CreateStack",
+                "cloudformation:UpdateStack",
                "cloudformation:DescribeStacks",
                "cloudformation:DescribeStackEvents",
                "cloudformation:ListStackResources"