Add required resource for terminate instance action (#428)

Signed-off-by: rasel <rasel@appscode.com>
appscode · Jan 10, 2025 · 3cf773e · 3cf773e
1 parent d758eb1
commit 3cf773e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/files/products/appscode/aws-marketplace/ace_payg_cf_amd64.yaml b/files/products/appscode/aws-marketplace/ace_payg_cf_amd64.yaml
@@ -307,7 +307,6 @@ Resources:
                   - 'ec2:ReleaseAddress'
                   - 'ec2:RevokeSecurityGroupIngress'
                   - 'ec2:RunInstances'
-                  - 'ec2:TerminateInstances'
                   - 'tag:GetResources'
                   - 'elasticloadbalancing:AddTags'
                   - 'elasticloadbalancing:CreateLoadBalancer'
@@ -349,6 +348,10 @@ Resources:
                   - 'eks:DescribeCluster' #import cluster action
                   - 'eks:ListClusters' #import cluster action
                 Resource: '*'
+              - Effect: Allow
+                Action:
+                  - 'ec2:TerminateInstances'
+                Resource: 'arn:*:ec2:*:*:instance/i-*'
               - Effect: Allow
                 Action:
                   - 'autoscaling:CreateAutoScalingGroup'