From 0e1dcd9db9cd3f98526482cce53e9c24972013b6 Mon Sep 17 00:00:00 2001
From: French Ben <FrenchBen@users.noreply.github.com>
Date: Mon, 30 Oct 2017 17:56:42 +0100
Subject: [PATCH] Modify subnet is needed on top of modify vpc (#5138)

Signed-off-by: French Ben <frenchben@docker.com>
---
 docker-for-aws/iam-permissions.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker-for-aws/iam-permissions.md b/docker-for-aws/iam-permissions.md
index 49537d7841..bf54d656b2 100644
--- a/docker-for-aws/iam-permissions.md
+++ b/docker-for-aws/iam-permissions.md
@@ -118,6 +118,7 @@ follow the link for more information.
                 "ec2:GetConsoleScreenshot",
                 "ec2:ModifyNetworkInterfaceAttribute",
                 "ec2:ModifyVpcAttribute",
+                "ec2:ModifySubnetAttribute",
                 "ec2:RebootInstances",
                 "ec2:ReleaseAddress",
                 "ec2:ReleaseHosts",