awslabs / amazon-eks-ami

Packer configuration for building a custom EKS AMI
https://awslabs.github.io/amazon-eks-ami/
MIT No Attribution
2.42k stars 1.14k forks source link

Add ListBucket action in IAM permissions. #1844

Closed YngveMolnes closed 3 months ago

YngveMolnes commented 3 months ago

In order to make this work with cross-account IAM we had to explicitly add ListBucket to the role we use to build our AMIs. And in order for ListBucket to work properly, we also had to reference the bucket rather than a wildcard path at root.

Issue #, if available:

Description of changes:

Changes to permissions documentation.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Testing Done

See this guide for recommended testing for PRs. Some tests may not apply. Completing tests and providing additional validation steps are not required, but it is recommended and may reduce review time and time to merge.

cartermckinnon commented 3 months ago

Thanks, @YngveMolnes !