fix: Remove "autoscaling:UpdateAutoScalingGroup" permission from cl…

…uster-autoscaler IRSA (#357)
terraform-aws-modules · May 5, 2023 · aeb5d7f · aeb5d7f
1 parent 3cd8f1a
commit aeb5d7f
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -74,8 +74,7 @@ data "aws_iam_policy_document" "cluster_autoscaler" {
     content {
       actions = [
         "autoscaling:SetDesiredCapacity",
-        "autoscaling:TerminateInstanceInAutoScalingGroup",
-        "autoscaling:UpdateAutoScalingGroup",
+        "autoscaling:TerminateInstanceInAutoScalingGroup"
       ]
 
       resources = ["*"]