[Policies] Add ec2:DeleteTags to the pcluster user role as required b…

…y workflows updating the head node instance. The permissions has been added to the public CFN template for permissions and in the role assumed by the test framework Signed-off-by: Giacomo Marciani <[email protected]>
aws · Apr 10, 2024 · d153564 · d153564
1 parent 66ee89b
commit d153564
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/cloudformation/policies/parallelcluster-policies.yaml b/cloudformation/policies/parallelcluster-policies.yaml
@@ -362,6 +362,7 @@ Resources:
               - ec2:CreateSecurityGroup
               - ec2:CreateSnapshot
               - ec2:CreateTags
+              - ec2:DeleteTags
               - ec2:CreateVolume
               - ec2:DeleteLaunchTemplate
               - ec2:DeleteNetworkInterface

diff --git a/tests/iam_policies/user-role.cfn.yaml b/tests/iam_policies/user-role.cfn.yaml
@@ -303,6 +303,7 @@ Resources:
               - ec2:CreateSecurityGroup
               - ec2:CreateSnapshot
               - ec2:CreateTags
+              - ec2:DeleteTags
               - ec2:CreateVolume
               - ec2:DeleteLaunchTemplate
               - ec2:DeleteNetworkInterface