From b89d406ee004405865c77604b4f46b492b5f0c6a Mon Sep 17 00:00:00 2001
From: Jack Ivanov <17044561+jackivanov@users.noreply.github.com>
Date: Thu, 24 Jan 2019 13:11:34 +0100
Subject: [PATCH] Update deploy-from-ansible.md (#1307)

---
 docs/deploy-from-ansible.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/deploy-from-ansible.md b/docs/deploy-from-ansible.md
index 9d3d3f2..361272d 100644
--- a/docs/deploy-from-ansible.md
+++ b/docs/deploy-from-ansible.md
@@ -202,6 +202,28 @@ Required variables:
 
 Possible options can be gathered via cli `aws lightsail get-regions`
 
+#### Minimum required IAM permissions for deployment:
+
+```
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "LightsailDeployment",
+            "Effect": "Allow",
+            "Action": [
+                "lightsail:GetInstance",
+                "lightsail:CreateInstances",
+                "lightsail:OpenInstancePublicPorts"
+            ],
+            "Resource": [
+                "*"
+            ]
+        }
+    ]
+}
+```
+
 ### Scaleway
 
 Required variables: