Update launch policy with tag permissions

Signed-off-by: Paolo Di Tommaso <[email protected]>
seqeralabs · Oct 5, 2022 · 65b4659 · 65b4659
1 parent 1d8f23a
commit 65b4659
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 2 deletions.
diff --git a/changelog.txt b/changelog.txt
@@ -0,0 +1,6 @@
+# changelog 
+v1.1.0 - 5 Oct 2022
+- Add permissions required by Resource Labels / Tags feature 
+
+v1.0.0 
+- Initial release
diff --git a/forge/forge-policy.json b/forge/forge-policy.json
@@ -20,6 +20,8 @@
               "iam:ListAttachedRolePolicies",
               "iam:DeleteRolePolicy",
               "iam:ListRolePolicies",
+              "iam:TagRole",
+              "iam:TagInstanceProfile",
               "batch:CreateComputeEnvironment",
               "batch:DescribeComputeEnvironments",
               "batch:CreateJobQueue",
@@ -28,9 +30,11 @@
               "batch:DeleteComputeEnvironment",
               "batch:UpdateJobQueue",
               "batch:DeleteJobQueue",
+              "batch:TagResource",
               "fsx:DeleteFileSystem",
               "fsx:DescribeFileSystems",
               "fsx:CreateFileSystem",
+              "fsx:TagResource",
               "ec2:DescribeSecurityGroups",
               "ec2:DescribeAccountAttributes",
               "ec2:DescribeSubnets",
@@ -49,7 +53,8 @@
               "elasticfilesystem:DeleteMountTarget",
               "elasticfilesystem:DeleteFileSystem",
               "elasticfilesystem:UpdateFileSystem",
-              "elasticfilesystem:PutLifecycleConfiguration"
+              "elasticfilesystem:PutLifecycleConfiguration",
+              "elasticfilesystem:TagResource"
           ],
           "Resource": "*"
       },

diff --git a/launch/launch-policy.json b/launch/launch-policy.json
@@ -9,6 +9,7 @@
                 "batch:CancelJob",
                 "batch:SubmitJob",
                 "batch:ListJobs",
+                "batch:TagResource",
                 "batch:DescribeComputeEnvironments",
                 "batch:TerminateJob",
                 "batch:DescribeJobs",
@@ -26,7 +27,8 @@
                 "logs:StartQuery",
                 "logs:StopQuery",
                 "logs:TestMetricFilter",
-                "logs:FilterLogEvents"                
+                "logs:FilterLogEvents",
+                "secretsmanager:ListSecrets"
             ],
             "Resource": "*"
         }