From fb5939314a4ea38ef40a942eb8cdf6f0b54c5222 Mon Sep 17 00:00:00 2001
From: danvbloomberg <77079354+danvbloomberg@users.noreply.github.com>
Date: Mon, 19 Apr 2021 14:02:08 -0700
Subject: [PATCH] fix: Add missing IAM permission for NLB with EIPs (#1226)

---
 cluster.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cluster.tf b/cluster.tf
index 53a696b..03c3030 100644
--- a/cluster.tf
+++ b/cluster.tf
@@ -156,7 +156,8 @@ data "aws_iam_policy_document" "cluster_elb_sl_role_creation" {
     effect = "Allow"
     actions = [
       "ec2:DescribeAccountAttributes",
-      "ec2:DescribeInternetGateways"
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeAddresses"
     ]
     resources = ["*"]
   }