backport of commit 97af14a

hashicorp · Feb 20, 2025 · bdf6f4a · bdf6f4a
1 parent 88edcaf
commit bdf6f4a
Showing 1 changed file with 6 additions and 22 deletions.
diff --git a/website/content/docs/concepts/host-discovery/aws.mdx b/website/content/docs/concepts/host-discovery/aws.mdx
@@ -91,29 +91,13 @@ Perform the following steps to set up a host catalog using [AssumeRole](https://
            {
                "Effect": "Allow",
                "Action": [
-                   "ec2:Describe*",
-                   "ec2:GetSecurityGroupsForVpc"
+                   "sts:AssumeRole"
                ],
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": "elasticloadbalancing:Describe*",
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": [
-                   "cloudwatch:ListMetrics",
-                   "cloudwatch:GetMetricStatistics",
-                   "cloudwatch:Describe*"
-               ],
-               "Resource": "*"
-           },
-           {
-               "Effect": "Allow",
-               "Action": "autoscaling:Describe*",
-               "Resource": "*"
+               "Principal": {
+                   "Service": [
+                       "ec2.amazonaws.com"
+                   ]
+               }
            }
        ]
    }