Update AWS IAM permissions for VPC connected Lambda function (#28789)

elastic · Feb 10, 2022 · cfc69fd · cfc69fd
1 parent 1720d4a
commit cfc69fd
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/x-pack/functionbeat/docs/iam-permissions.asciidoc b/x-pack/functionbeat/docs/iam-permissions.asciidoc
@@ -66,7 +66,10 @@ function that collects events from CloudWatch logs.
                 "s3:DeleteObject",
                 "s3:ListBucket",
                 "s3:PutObject",
-                "s3:GetObject"
+                "s3:GetObject",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeSubnets",
+                "ec2:DescribeVpcs"
             ],
             "Resource": "*"
         }
@@ -122,7 +125,10 @@ function that reads from SQS queues or Kinesis data streams.
                 "s3:DeleteObject",
                 "s3:ListBucket",
                 "s3:PutObject",
-                "s3:GetObject"
+                "s3:GetObject",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeSubnets",
+                "ec2:DescribeVpcs"
             ],
             "Resource": "*"
         }