diff --git a/docs/README.md b/docs/README.md
index f8579db9..99f0f41e 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -74,8 +74,10 @@ kubectl apply -f secret.yaml
     {
       "Effect": "Allow",
       "Action": [
-        "s3:*",
-        "fsx:*"
+        "s3:ListBucket",
+        "fsx:CreateFileSystem",
+        "fsx:DeleteFileSystem",
+        "fsx:DescribeFileSystems"
       ],
       "Resource": ["*"]
     }
diff --git a/tester/e2e-test-config.yaml b/tester/e2e-test-config.yaml
index edad4b7b..bea77ada 100644
--- a/tester/e2e-test-config.yaml
+++ b/tester/e2e-test-config.yaml
@@ -21,8 +21,10 @@ cluster:
               {
                 "Effect": "Allow",
                 "Action": [
-                  "s3:*",
-                  "fsx:*"
+                  "s3:ListBucket",
+                  "fsx:CreateFileSystem",
+                  "fsx:DeleteFileSystem",
+                  "fsx:DescribeFileSystems"
                 ],
                 "Resource": ["*"]
               }