From 2af9a645038388c56e97e7ff525687e45fcfda31 Mon Sep 17 00:00:00 2001
From: Dean Illfeld <dean.illfeld@cmdsolutions.com.au>
Date: Thu, 20 Jun 2019 21:10:49 +1000
Subject: [PATCH] Update alb-ingress iam policy DescribeNetworkInterfaces
 required in 1.1.2

---
 CHANGELOG.md  | 4 ++++
 iam_policy.tf | 1 +
 2 files changed, 5 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c2b87b7..bf8a7c2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] - 2019-06-20
+### Added
+- Added ec2:DescribeNetworkInterfaces to alb-ingress policy
+
 ## [0.6.0] - 2019-06-09
 ### Breaking
 - Terraform 0.12 is now required
diff --git a/iam_policy.tf b/iam_policy.tf
index df0d229..a45bab6 100644
--- a/iam_policy.tf
+++ b/iam_policy.tf
@@ -110,6 +110,7 @@ data "aws_iam_policy_document" "worker_alb_ingress" {
       "ec2:DescribeInstances",
       "ec2:DescribeInstanceStatus",
       "ec2:DescribeInternetGateways",
+      "ec2:DescribeNetworkInterfaces",
       "ec2:DescribeSecurityGroups",
       "ec2:DescribeSubnets",
       "ec2:DescribeTags",