Add iam:UpdateAssumeRolePolicy to poweruser permissions (#87)

Add iam:UpdateAssumeRolePolicy to poweruser permissions
chanzuckerberg · Feb 28, 2019 · 3e8e525 · 3e8e525
1 parent 29024ad
commit 3e8e525
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/aws-iam-role-poweruser/main.tf b/aws-iam-role-poweruser/main.tf
@@ -68,6 +68,7 @@ data "aws_iam_policy_document" "misc" {
       "iam:PutRolePolicy",
       "iam:RemoveRoleFromInstanceProfile",
       "iam:TagRole",
+      "iam:UpdateAssumeRolePolicy",
       "iam:UpdateRole",
     ]