extend capa_controllerrole for iam:UntagRole action

pluralsh · Sep 12, 2023 · 4e9965c · 4e9965c
1 parent 9078590
commit 4e9965c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/bootstrap/terraform/aws-bootstrap-cluster-api/capa-sa.tf b/bootstrap/terraform/aws-bootstrap-cluster-api/capa-sa.tf
@@ -269,6 +269,7 @@ data "aws_iam_policy_document" "capa_controller_eks" {
       "iam:DeleteRole",
       "iam:CreateRole",
       "iam:TagRole",
+      "iam:UntagRole",
       "iam:AttachRolePolicy",
     ]
   }