fix: update v2 policy

neilkuan · Nov 8, 2020 · a77135b · a77135b
1 parent 0f3cb3e
commit a77135b
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/alb-controller-policy.ts b/src/alb-controller-policy.ts
@@ -249,8 +249,6 @@ const awsLoadBalancerControllerPolicyV2 = [
       'elasticloadbalancing:DeleteLoadBalancer',
       'elasticloadbalancing:ModifyTargetGroup',
       'elasticloadbalancing:ModifyTargetGroupAttributes',
-      'elasticloadbalancing:RegisterTargets',
-      'elasticloadbalancing:DeregisterTargets',
       'elasticloadbalancing:DeleteTargetGroup',
     ],
     Resource: '*',
@@ -260,6 +258,14 @@ const awsLoadBalancerControllerPolicyV2 = [
       },
     },
   },
+  {
+    Effect: 'Allow',
+    Action: [
+      'elasticloadbalancing:RegisterTargets',
+      'elasticloadbalancing:DeregisterTargets',
+    ],
+    Resource: 'arn:aws:elasticloadbalancing:*:*:targetgroup/*/*',
+  },
   {
     Effect: 'Allow',
     Action: [