Add EKS * permissions

Specifically we were missing EKS: DescribeUpdate, but gave * since we already had most of it anyway.
dandi · Sep 13, 2024 · 825d999 · 825d999
1 parent a5b11d4
commit 825d999
Showing 1 changed file with 1 addition and 19 deletions.
diff --git a/.aws/terraform-jupyterhub-provisioning-policies.json b/.aws/terraform-jupyterhub-provisioning-policies.json
@@ -68,25 +68,7 @@
         "ec2:RevokeSecurityGroupIngress",
         "ec2:RunInstances",
         "ecr-public:GetAuthorizationToken",
-        "eks:CreateAddon",
-        "eks:CreateCluster",
-        "eks:CreateNodegroup",
-        "eks:DeleteAddon",
-        "eks:DeleteCluster",
-        "eks:DeleteNodegroup",
-        "eks:DescribeAddon",
-        "eks:DescribeAddonVersions",
-        "eks:DescribeCluster",
-        "eks:DescribeNodegroup",
-        "eks:ListAddons",
-        "eks:ListClusters",
-        "eks:ListNodegroups",
-        "eks:TagResource",
-        "eks:UntagResource",
-        "eks:UpdateAddon",
-        "eks:UpdateClusterConfig",
-        "eks:UpdateClusterVersion",
-        "eks:UpdateNodegroupConfig",
+        "eks:*",
         "elasticfilesystem:CreateFileSystem",
         "elasticfilesystem:CreateMountTarget",
         "elasticfilesystem:CreateTags",