fixes incorrect AssumeRole policy (#5555)

1 year ago · 11c19d574f
parent 14808d197f
commit 11c19d574f
1 changed files with 6 additions and 22 deletions
--- a/website/content/docs/concepts/host-discovery/aws.mdx
+++ b/website/content/docs/concepts/host-discovery/aws.mdx
@ -91,29 +91,13 @@ Perform the following steps to set up a host catalog using [AssumeRole](https://
           {
               "Effect": "Allow",
               "Action": [
-                   "ec2:Describe*",
-                   "ec2:GetSecurityGroupsForVpc"
+                   "sts:AssumeRole"
               ],
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": "elasticloadbalancing:Describe*",
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": [
-                   "cloudwatch:ListMetrics",
-                   "cloudwatch:GetMetricStatistics",
-                   "cloudwatch:Describe*"
-               ],
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": "autoscaling:Describe*",
-               "Resource": "*"
+               "Principal": {
+                   "Service": [
+                       "ec2.amazonaws.com"
+                   ]
+               }
           }
       ]
   }