Merge pull request #796 from chancez/retry_init_assets

Provide masters access to s3:HeadObject and s3:ListBucket
coreos · Jun 5, 2017 · aa9fefc · aa9fefc
2 parents e75f605 + f7ac2ba
commit aa9fefc
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/modules/aws/master-asg/master.tf b/modules/aws/master-asg/master.tf
@@ -141,7 +141,9 @@ resource "aws_iam_role_policy" "master_policy" {
     },
     {
       "Action" : [
-        "s3:GetObject"
+        "s3:GetObject",
+        "s3:HeadObject",
+        "s3:ListBucket"
       ],
       "Resource": "arn:aws:s3:::*",
       "Effect": "Allow"