feat: ListInstanceProfiles permission to IAM policy for Karpenter (#479)

oscarboher · web-flow · commit 1fcd5c11d9a5 · 2025-12-16T10:08:33.000-08:00
diff --git a/main.tf b/main.tf
@@ -2948,6 +2948,7 @@ data "aws_iam_policy_document" "karpenter" {
         "iam:GetInstanceProfile",
         "iam:RemoveRoleFromInstanceProfile",
         "iam:TagInstanceProfile",
+        "iam:ListInstanceProfiles",
       ]
       resources = ["*"]
     }

Original file line number	Diff line number	Diff line change
`@@ -2948,6 +2948,7 @@ data "aws_iam_policy_document" "karpenter" {`
`2948`	`2948`	`"iam:GetInstanceProfile",`
`2949`	`2949`	`"iam:RemoveRoleFromInstanceProfile",`
`2950`	`2950`	`"iam:TagInstanceProfile",`
	`2951`	`+ "iam:ListInstanceProfiles",`
`2951`	`2952`	`]`
`2952`	`2953`	`resources = ["*"]`
`2953`	`2954`	`}`