[iam] Add missing IAM permissions for NLBs

Fixes nubisproject#709
gozer · Sep 18, 2018 · 05216ea · 05216ea
1 parent ba12401
commit 05216ea
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/nubis/terraform/main.tf b/nubis/terraform/main.tf
@@ -471,6 +471,21 @@ data "aws_iam_policy_document" "ci_deploy" {
       "elasticache:AddTagsToResource",
       "elasticache:ListTagsForResource",
       "elasticache:RemoveTagsFromResource",
+      "elasticloadbalancing:CreateTargetGroup",
+      "elasticloadbalancing:DeleteTargetGroup",
+      "elasticloadbalancing:DescribeTargetGroupAttributes",
+      "elasticloadbalancing:DescribeTargetGroups",
+      "elasticloadbalancing:ModifyTargetGroup",
+      "elasticloadbalancing:ModifyTargetGroupAttributes",
+      "autoscaling:DetachLoadBalancerTargetGroups",
+      "autoscaling:DescribeLoadBalancerTargetGroups",
+      "autoscaling:AttachLoadBalancerTargetGroups",
+      "elasticloadbalancing:CreateListener",
+      "elasticloadbalancing:DeleteListener",
+      "elasticloadbalancing:DescribeListeners",
+      "elasticloadbalancing:ModifyListener",
+      "elasticloadbalancing:SetLoadBalancerListenerSSLCertificate",
+      "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
       "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
       "elasticloadbalancing:ConfigureHealthCheck",
       "elasticloadbalancing:CreateLoadBalancer",