From 12574a3e9759c69533c989451d008652a7e44a99 Mon Sep 17 00:00:00 2001
From: Stefan Nica <stefan@zenml.io>
Date: Mon, 2 Dec 2024 21:50:03 +0100
Subject: [PATCH] Update one-click deployment docs for AWS

---
 .../stack-deployment/deploy-a-cloud-stack.md  | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/docs/book/how-to/infrastructure-deployment/stack-deployment/deploy-a-cloud-stack.md b/docs/book/how-to/infrastructure-deployment/stack-deployment/deploy-a-cloud-stack.md
index c677bb3c24..548d4fc3d5 100644
--- a/docs/book/how-to/infrastructure-deployment/stack-deployment/deploy-a-cloud-stack.md
+++ b/docs/book/how-to/infrastructure-deployment/stack-deployment/deploy-a-cloud-stack.md
@@ -335,6 +335,7 @@ prepare for you based on your cloud provider:
 
 - An S3 bucket that will be used as a ZenML Artifact Store.
 - An ECR container registry that will be used as a ZenML Container Registry.
+- A CloudBuild project that will be used as a ZenML Image Builder.
 - Permissions to use SageMaker as a ZenML Orchestrator and Step Operator.
 - An IAM user and IAM role with the minimum necessary permissions to access 
 the resources listed above.
@@ -367,6 +368,24 @@ following AWS permissions in your AWS account:
   * ecr:CompleteLayerUpload
   * ecr:PutImage
   * ecr:GetAuthorizationToken
+* CloudBuild (Client):
+  * codebuild:CreateProject
+  * codebuild:BatchGetBuilds
+* CloudBuild (Service):
+  * s3:GetObject
+  * s3:GetObjectVersion
+  * logs:CreateLogGroup
+  * logs:CreateLogStream
+  * logs:PutLogEvents
+  * ecr:BatchGetImage
+  * ecr:DescribeImages
+  * ecr:BatchCheckLayerAvailability
+  * ecr:GetDownloadUrlForLayer
+  * ecr:InitiateLayerUpload
+  * ecr:UploadLayerPart
+  * ecr:CompleteLayerUpload
+  * ecr:PutImage
+  * ecr:GetAuthorizationToken
 * SageMaker (Client):
   * sagemaker:CreatePipeline
   * sagemaker:StartPipelineExecution