...
Functionality | AWS (IAM Role) | AZURE | GCP |
Increase Node | ec2:GetLaunchTemplateData | Microsoft.Network/applicationGateways/write Microsoft.Network/networkSecurityGroups/read Microsoft.Network/networkInterfaces/write Microsoft.Network/virtualNetworks/subnets/join/action Microsoft.Network/networkSecurityGroups/join/action | compute.subnetworks.use compute.instances.create |
Decrease Node | ec2:DeleteLaunchTemplate | Microsoft.Network/applicationGateways/write Microsoft.Network/networkSecurityGroups/read Microsoft.Network/networkInterfaces/write Microsoft.Network/virtualNetworks/subnets/join/action Microsoft.Network/networkSecurityGroups/join/action | compute.subnetworks.use compute.instances.delete |
Increase Disk | ec2:CreateVolume | Not applicable | compute.disks.create |
Decrease Disk | ec2:DetachVolume | Not applicable | compute.instances.detachDisk |
Load Balancer/ TargetGroup Entry Addition | elasticloadbalancing:DescribeTargetGroups elasticloadbalancing:RegisterTargets | Not applicable | compute.instanceGroups.get |
Load Balancer/ Target Group Entry Deletion | elasticloadbalancing:DescribeTargetGroups elasticloadbalancing:DeregisterTargets | Not applicable | compute.instanceGroups.get |
Target Group health check/probe path modification | “elasticloadbalancing:ModifyTargetGroup “ | Not applicable | compute.instanceGroups.get |
...
Read Also: