From 59672d476d5d4025f4d3d1ca927ada6ae4029577 Mon Sep 17 00:00:00 2001
From: Maxim Perepelitsa <n0xff@outlook.com>
Date: Tue, 14 Jun 2022 00:11:53 +0300
Subject: [PATCH] Update Lightsail required IAM permissions (#14438)

---
 docs/deploy-from-ansible.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/deploy-from-ansible.md b/docs/deploy-from-ansible.md
index 15a486b..0a4618d 100644
--- a/docs/deploy-from-ansible.md
+++ b/docs/deploy-from-ansible.md
@@ -248,6 +248,7 @@ Possible options can be gathered via cli `aws lightsail get-regions`
                 "lightsail:DisableAddOn",
                 "lightsail:PutInstancePublicPorts",
                 "lightsail:StartInstance",
+                "lightsail:TagResource",
                 "lightsail:GetStaticIp",
                 "lightsail:AllocateStaticIp",
                 "lightsail:AttachStaticIp"
@@ -261,6 +262,7 @@ Possible options can be gathered via cli `aws lightsail get-regions`
             "Effect": "Allow",
             "Action": [
                 "cloudformation:CreateStack",
+                "cloudformation:UpdateStack",
                 "cloudformation:DescribeStacks",
                 "cloudformation:DescribeStackEvents",
                 "cloudformation:ListStackResources"