Fix AWS Policies (#60)

- Add list queue policy for all queues @mistercrunch
lyft · Nov 17, 2017 · 5d2e184 · 5d2e184
1 parent 763a52b
commit 5d2e184
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/ops/orca/states/superset.sls b/ops/orca/states/superset.sls
@@ -54,12 +54,16 @@ Ensure superset-{{ grains.service_instance }}-iad iam role exists:
                 - 'sqs:GetQueueUrl'
                 - 'sqs:GetQueueAttributes'
                 - 'sqs:SetQueueAttributes'
-                - 'sqs:ListQueues'
                 - 'sqs:CreateQueue'
                 - 'sqs:DeleteQueue'
               Effect: 'Allow'
               Resource:
                 - 'arn:aws:sqs:*:*:superset-{{grains.service_instance}}-*'
+            - Action:
+                - 'sqs:ListQueues'
+              Effect: 'Allow'
+              Resource:
+                - 'arn:aws:sqs:*'
 
 Ensure {{ grains.cluster_name }} asg exists:
   boto_asg.present: