Minimizing the scope of Client EC2 privileges

aws-ia · Oct 24, 2023 · 52cca4f · 52cca4f
1 parent e9623ce
commit 52cca4f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/patterns/privatelink-access/client.tf b/patterns/privatelink-access/client.tf
@@ -82,7 +82,8 @@ resource "aws_iam_policy" "eks_full_access_policy" {
     Statement = [
       {
         Action = [
-          "eks:*"
+          "eks:DescribeCluster", 
+          "eks:ListClusters"
         ]
         Effect   = "Allow"
         Resource = module.eks.cluster_arn