added createvpcendpoint and describevpcendpoint to the byoc customer admin policy
{
"Effect": "Allow",
"Action": [
- "ec2:AttachVpnGateway",
- "ec2:DescribeVpnConnections",
"ec2:AcceptVpcPeeringConnection",
- "ec2:DeleteVpcPeeringConnection",
- "ec2:DescribeVpcPeeringConnections",
+ "ec2:AttachVpnGateway",
+ "ec2:CreateRoute",
+ "ec2:CreateTags",
+ "ec2:CreateVpcEndpoint",
+ "ec2:CreateVpcPeeringConnection",
+ "ec2:CreateVpnConnection",
"ec2:CreateVpnConnectionRoute",
- "ec2:RejectVpcPeeringConnection",
- "ec2:DetachVpnGateway",
+ "ec2:CreateVpnGateway",
+ "ec2:DeleteVpcPeeringConnection",
+ "ec2:DeleteVpnConnection",
"ec2:DeleteVpnConnectionRoute",
"ec2:DeleteVpnGateway",
+ "ec2:DescribeRouteTables",
+ "ec2:DescribeVpcEndpoint",
+ "ec2:DescribeVpcPeeringConnections",
"ec2:DescribeVpcs",
- "ec2:CreateVpnGateway",
- "ec2:ModifyVpcPeeringConnectionOptions",
- "ec2:DeleteVpnConnection",
- "ec2:CreateVpcPeeringConnection",
+ "ec2:DescribeVpnConnections",
"ec2:DescribeVpnGateways",
- "ec2:CreateVpnConnection",
- "ec2:DescribeRouteTables",
- "ec2:CreateTags",
- "ec2:CreateRoute",
+ "ec2:DetachVpnGateway",
+ "ec2:ModifyVpcPeeringConnectionOptions",
+ "ec2:RejectVpcPeeringConnection",
"support:*",
"directconnect:*"
],
