let vpcaccess systems disable their own src/dest check

[awsible] / roles / vpcaccess-infrastructure / files / vpcaccess-policy.json

diff --git a/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json b/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
index acd579581ef9dc7c50f3c090379a6a3bd9f91a3b..a1c244d47dbcfb11a93a51a152c5c17391a401a5 100644 (file)
--- a/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
+++ b/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
@@ -9,6 +9,7 @@
                                "ec2:CreateRoute",
                                "ec2:DeleteRoute",
                                "ec2:DescribeRouteTables",
+                               "ec2:ModifyInstanceAttribute",
                                "ec2:ModifyNetworkInterfaceAttribute"
                        ],
                        "Resource": [
@@ -16,4 +17,4 @@
                        ]
                }
        ]
-}
\ No newline at end of file
+}