ecr.tf: sync terraform with running configuration
During the project to expand our packer build to
include Windows images, several capabilities were
added to the packer policy manually that were not
applied to the terraform.
This change applies those updates to our terraform
so that they won't be removed from the running
configuration during the next deployment.
Signed-off-by: Kelley Spoon <kelley.spoon@linaro.org>
Change-Id: I5854b73fbca68514bf7258115d78a2d5cb311eba
diff --git a/ecr.tf b/ecr.tf
index 103f9aa..9e7940a 100644
--- a/ecr.tf
+++ b/ecr.tf
@@ -116,8 +116,22 @@
"ec2:ModifySnapshotAttribute",
"ec2:RegisterImage",
"ec2:RunInstances",
+ "ec2:RunInstances*",
"ec2:StopInstances",
- "ec2:TerminateInstances"
+ "ec2:TerminateInstances",
+ "ec2:DescribeSpotInstanceRequests",
+ "ec2:CancelSpotInstanceRequests",
+ "ec2:GetConsoleOutput",
+ "ec2:RequestSpotInstances",
+ "ec2:RunInstances",
+ "ec2:StartInstances",
+ "ec2:DeleteTags",
+ "ec2:DescribeInstanceTypes",
+ "ec2:DescribeKeyPairs",
+ "ec2:DescribeAvailabilityZones",
+ "iam:ListInstanceProfilesForRole",
+ "iam:PassRole",
+
]
resources = [
"*"