Revert "fixing bugs in NodeConfig"

This reverts commit 982aaf1.
aws · Sep 13, 2023 · 85baa5f · 85baa5f
1 parent 982aaf1
commit 85baa5f
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/tools/NodeConfigCompare/configuration/cloud_formation_template.yaml b/tools/NodeConfigCompare/configuration/cloud_formation_template.yaml
@@ -486,7 +486,19 @@ Resources:
           - Effect: Allow
             Action:
               - ec2:Describe*
-            Resource: "*"
+            Resource:
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:elastic-ip/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:client-vpn-endpoint/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:image/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:fleet/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:fpga-image/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:instance/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:snapshot/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:spot-fleet-request/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:volumne/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:elastic-ip/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:vpc/*"
+              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:vpc-endpoint-service/*"
 
   RedshiftServerlessIAMPolicy:
     Type: 'AWS::IAM::ManagedPolicy'