From 407606adbe003d8f79ee3a45cca526eca68dbd54 Mon Sep 17 00:00:00 2001
From: Justin Wind <j.wind@partner.samsung.com>
Date: Mon, 17 Apr 2017 14:30:45 -0700
Subject: [PATCH] let vpcaccess systems disable their own src/dest check

---
 roles/vpcaccess-infrastructure/files/vpcaccess-policy.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json b/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
index acd5795..a1c244d 100644
--- a/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
+++ b/roles/vpcaccess-infrastructure/files/vpcaccess-policy.json
@@ -9,6 +9,7 @@
 				"ec2:CreateRoute",
 				"ec2:DeleteRoute",
 				"ec2:DescribeRouteTables",
+				"ec2:ModifyInstanceAttribute",
 				"ec2:ModifyNetworkInterfaceAttribute"
 			],
 			"Resource": [
@@ -16,4 +17,4 @@
 			]
 		}
 	]
-}
\ No newline at end of file
+}
-- 
2.43.2