How to: Configure permissions on AWS for Provisioning on TPP

Applies to:

TPP 16.2 and above

Summary:

The following permissions are needed to utilise the full feature set available in TPP 16.2

{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"iam:DeleteServerCertificate",
"iam:UploadServerCertificate",
"iam:ListServerCertificates",
"iam:GetServerCertificate",
"acm:RequestCertificate",
"acm:GetCertificate",
"acm:DeleteCertificate",
"elasticloadbalancing:SetLoadBalancerListenerSSLCertificate",
"cloudfront:GetDistributionConfig",
"cloudfront:UpdateDistribution"
],
"Resource": "*"
}
]
}