cloudformation: Add ec2:DescribeImages to controller policies.
@@ -168,6 +168,7 @@ func controllersPolicy(accountID string) *iam.PolicyDocument {
"ec2:DescribeAvailabilityZones",
"ec2:DescribeInstances",
"ec2:DescribeInternetGateways",
+ "ec2:DescribeImages",
"ec2:DescribeNatGateways",
"ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups",
@@ -215,6 +216,7 @@ func cloudProviderControlPlaneAwsPolicy() *iam.PolicyDocument {
"autoscaling:DescribeLaunchConfigurations",
"autoscaling:DescribeTags",
"ec2:DescribeInstances",
+ "ec2:DescribeImages",
"ec2:DescribeRegions",
"ec2:DescribeRouteTables",
"ec2:DescribeSecurityGroups",
