Also allow revoking on k8s created security groups

itskoko · Feb 27, 2018 · 0ec86d1 · 0ec86d1
1 parent 3f780f4
commit 0ec86d1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/kubernetes.yaml b/kubernetes.yaml
@@ -785,6 +785,7 @@ Resources:
               - "ec2:AuthorizeSecurityGroup*"
               - "ec2:DeleteSecurityGroup"
               - "ec2:DeleteRoute"
+              - "ec2:RevokeSecurityGroup*"
             Resource:
               - "*"
             Condition: