Add missing permissions for scheduler function

base2Services · Nov 9, 2021 · dbbf4ca · dbbf4ca
1 parent 5283175
commit dbbf4ca
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/cfnvpn/templates/vpn.rb b/lib/cfnvpn/templates/vpn.rb
@@ -353,7 +353,10 @@ def scheduler(name, start, stop, bucket)
                     'ec2:DescribeClientVpnAuthorizationRules',
                     'ec2:DescribeClientVpnEndpoints',
                     'ec2:DescribeClientVpnConnections',
-                    'ec2:TerminateClientVpnConnections'
+                    'ec2:TerminateClientVpnConnections',
+                    'ec2:DescribeClientVpnRoutes',
+                    'ec2:CreateClientVpnRoute',
+                    'ec2:DeleteClientVpnRoute'
                   ],
                   Resource: '*'
                 }]