templates/amazon-eks-per-region-resources.template.yaml [344:370]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      IamPolicy:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Action:
            - "secretsmanager:GetSecretValue"  # required for deploying helm charts into non-EKS kubernetes clusters
            - "kms:Decrypt"
            - "eks:DescribeCluster"
            - "s3:GetObject"
            - "sts:AssumeRole"
            - "iam:PassRole"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:CreateNetworkInterface"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DescribeNetworkInterfaces"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DeleteNetworkInterface"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DescribeVpcs"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DescribeSubnets"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DescribeRouteTables"  # required for EKS clusters with Public Endpoint disabled
            - "ec2:DescribeSecurityGroups"  # required for EKS clusters with Public Endpoint disabled
            - "logs:CreateLogGroup"  # required for EKS clusters with Public Endpoint disabled
            - "logs:CreateLogStream"  # required for EKS clusters with Public Endpoint disabled
            - "logs:PutLogEvents"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:UpdateFunctionConfiguration"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:DeleteFunction"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:GetFunction"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:InvokeFunction"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:CreateFunction"  # required for EKS clusters with Public Endpoint disabled
            - "lambda:UpdateFunctionCode"  # required for EKS clusters with Public Endpoint disabled
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/amazon-eks-per-region-resources.template.yaml [446:472]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      IamPolicy:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Action:
              - "secretsmanager:GetSecretValue"  # required for deploying helm charts into non-EKS kubernetes clusters
              - "kms:Decrypt"
              - "eks:DescribeCluster"
              - "s3:GetObject"
              - "sts:AssumeRole"
              - "iam:PassRole"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:CreateNetworkInterface"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DescribeNetworkInterfaces"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DeleteNetworkInterface"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DescribeVpcs"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DescribeSubnets"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DescribeRouteTables"  # required for EKS clusters with Public Endpoint disabled
              - "ec2:DescribeSecurityGroups"  # required for EKS clusters with Public Endpoint disabled
              - "logs:CreateLogGroup"  # required for EKS clusters with Public Endpoint disabled
              - "logs:CreateLogStream"  # required for EKS clusters with Public Endpoint disabled
              - "logs:PutLogEvents"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:UpdateFunctionConfiguration"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:DeleteFunction"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:GetFunction"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:InvokeFunction"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:CreateFunction"  # required for EKS clusters with Public Endpoint disabled
              - "lambda:UpdateFunctionCode"  # required for EKS clusters with Public Endpoint disabled
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



