From 5f6e1533bc7e727eee90b5e7d07e32d7f96e29b3 Mon Sep 17 00:00:00 2001
From: Panagiotis Panagiotopoulos <panagiotis@redpanda.com>
Date: Thu, 4 Dec 2025 17:34:10 +0200
Subject: [PATCH] Allow CreateOrUpdateTags and DeleteTags at redpanda ASGs

---
 customer-managed/aws/terraform/iam_redpanda_agent.tf | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/customer-managed/aws/terraform/iam_redpanda_agent.tf b/customer-managed/aws/terraform/iam_redpanda_agent.tf
index df5b8b3..b04a35d 100644
--- a/customer-managed/aws/terraform/iam_redpanda_agent.tf
+++ b/customer-managed/aws/terraform/iam_redpanda_agent.tf
@@ -415,6 +415,18 @@ data "aws_iam_policy_document" "redpanda_agent2" {
     ]
   }
 
+  statement {
+    effect = "Allow"
+    actions = [
+      "autoscaling:CreateOrUpdateTags",
+      "autoscaling:DeleteTags",
+    ]
+    resources = [
+      "arn:aws:autoscaling:*:${local.aws_account_id}:autoScalingGroup:*:autoScalingGroupName/redpanda*",
+      "arn:aws:autoscaling:*:${local.aws_account_id}:autoScalingGroup:*:autoScalingGroupName/eks-redpanda*",
+    ]
+  }
+
   statement {
     effect = "Allow"
     actions = [