Add tag permissions for IAM (#92)

* Update iam-policy.json * Update CHANGELOG.md
giantswarm · Apr 8, 2024 · 326e3f5 · 326e3f5
1 parent c91bcd9
commit 326e3f5
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add `iam:ListRoleTags` and `iam:UntagRole` permissions to the AWS operator role.
+
 ## [3.4.0] - 2024-01-16
 
 ### Changed

diff --git a/aws-operator-role/iam-policy.json b/aws-operator-role/iam-policy.json
@@ -49,6 +49,8 @@
                 "iam:PutRolePolicy",
                 "iam:RemoveRoleFromInstanceProfile",
                 "iam:TagRole",
+                "iam:ListRoleTags",
+                "iam:UntagRole",
                 "iam:UpdateAssumeRolePolicy",
                 "iam:UpdateRoleDescription",
                 "kms:*",