[iam] Add missing IAM permissions for NLBs

Fixes nubisproject#709
gozer · Sep 18, 2018 · d9e2c07 · d9e2c07
1 parent d07d981
commit d9e2c07
Showing 1 changed file with 14 additions and 1 deletion.
diff --git a/nubis/terraform/main.tf b/nubis/terraform/main.tf
@@ -402,6 +402,9 @@ data "aws_iam_policy_document" "ci_deploy" {
       "autoscaling:DescribeNotificationConfigurations",
       "autoscaling:DescribeAutoScalingNotificationTypes",
       "autoscaling:DeleteNotificationConfiguration",
+      "autoscaling:DetachLoadBalancerTargetGroups",
+      "autoscaling:DescribeLoadBalancerTargetGroups",
+      "autoscaling:AttachLoadBalancerTargetGroups",
       "acm:AddTagsToCertificate",
       "acm:DeleteCertificate",
       "acm:DescribeCertificate",
@@ -477,7 +480,17 @@ data "aws_iam_policy_document" "ci_deploy" {
       "elasticloadbalancing:DeleteLoadBalancerPolicy",
       "elasticloadbalancing:DescribeLoadBalancerPolicies",
       "elasticloadbalancing:DescribeLoadBalancerPolicyTypes",
-      "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
+      "elasticloadbalancing:CreateTargetGroup",
+      "elasticloadbalancing:DeleteTargetGroup",
+      "elasticloadbalancing:DescribeTargetGroupAttributes",
+      "elasticloadbalancing:DescribeTargetGroups",
+      "elasticloadbalancing:ModifyTargetGroup",
+      "elasticloadbalancing:ModifyTargetGroupAttributes",
+      "elasticloadbalancing:CreateListener",
+      "elasticloadbalancing:DeleteListener",
+      "elasticloadbalancing:DescribeListeners",
+      "elasticloadbalancing:ModifyListener",
+      "elasticloadbalancing:SetLoadBalancerListenerSSLCertificate",
       "elasticloadbalancing:ConfigureHealthCheck",
       "elasticloadbalancing:CreateLoadBalancer",
       "elasticloadbalancing:DeleteLoadBalancer",