Allow DescribeStackEvents

For the operator being able to retrieve stack events on failed provisioning, this action is required.
Casecommons · Jan 8, 2019 · 643a427 · 643a427
1 parent 4158206
commit 643a427
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/docs/install_prereqs.md b/docs/install_prereqs.md
@@ -93,6 +93,7 @@ The role/user used for provisioning requires additional permissions for provisio
             "cloudformation:CreateStack",
             "cloudformation:DeleteStack",
             "cloudformation:DescribeStacks",
+            "cloudformation:DescribeStackEvents",
             "cloudformation:UpdateStack",
             "cloudformation:CancelUpdateStack"
          ],

diff --git a/setup/prerequisites.yaml b/setup/prerequisites.yaml
@@ -70,6 +70,7 @@ Resources:
             - "cloudformation:CreateStack"
             - "cloudformation:DeleteStack"
             - "cloudformation:DescribeStacks"
+            - "cloudformation:DescribeStackEvents"
             - "cloudformation:UpdateStack"
             - "cloudformation:CancelUpdateStack"
             Resource: !Sub "arn:aws:cloudformation:${AWS::Region}:${AWS::AccountId}:stack/aws-service-broker-*/*"