From afad1a3a0e96343c5bc808b36fa8b905e27de149 Mon Sep 17 00:00:00 2001
From: Evan Stohlmann <evmann@amazon.com>
Date: Tue, 12 Nov 2024 13:31:41 -0700
Subject: [PATCH] Update permissions on execution role

---
 lib/models/model-api.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/lib/models/model-api.ts b/lib/models/model-api.ts
index 82875943..d3c41c56 100644
--- a/lib/models/model-api.ts
+++ b/lib/models/model-api.ts
@@ -179,7 +179,13 @@ export class ModelsApi extends Construct {
                         new PolicyStatement({
                             effect: Effect.ALLOW,
                             actions: [
-                                'ec2:TerminateInstances'
+                                'ec2:TerminateInstances',
+                                'ec2:CreateNetworkInterface',
+                                'ec2:DescribeNetworkInterfaces',
+                                'ec2:DescribeSubnets',
+                                'ec2:DeleteNetworkInterface',
+                                'ec2:AssignPrivateIpAddresses',
+                                'ec2:UnassignPrivateIpAddresses'
                             ],
                             resources: ['*'],
                             conditions: {