Update reference of perms required for deploy and cert verification

goinverse-oss · Mar 5, 2020 · c3579b4 · c3579b4
1 parent 6211bfc
commit c3579b4
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/aws/deploy_policy.json b/aws/deploy_policy.json
@@ -143,7 +143,8 @@
       "Action": [
         "route53:ChangeResourceRecordSets",
         "route53:ListHostedZones",
-        "route53:ListResourceRecordSets"
+        "route53:ListResourceRecordSets",
+        "route53:GetHostedZone"
       ],
       "Resource": "*"
     },
@@ -153,20 +154,21 @@
         "acm:AddTagsToCertificate",
         "acm:RequestCertificate",
         "acm:DescribeCertificate",
-        "acm:DeleteCertificate"
+        "acm:DeleteCertificate",
+        "acm:ListCertificates"
       ],
       "Resource": "*"
     },
     {
       "Effect": "Allow",
       "Action": [
-        "apigateway:GET",
-        "apigateway:POST",
-        "apigateway:DELETE"
+        "apigateway:*"
       ],
       "Resource": [
         "arn:aws:apigateway:*::/domainnames",
-        "arn:aws:apigateway:*::/domainnames/*"
+        "arn:aws:apigateway:*::/domainnames/*",
+        "arn:aws:apigateway:*::/domainnames/*/*",
+        "arn:aws:apigateway:*::/domainnames/*/*/*"
       ]
     },
     {