NodeConfig_RestoreClusterfromSnapshot_IAM_permission_bug_fix

aws · Sep 13, 2023 · 96fac32 · 96fac32
1 parent dcf9d25
commit 96fac32
Showing 1 changed file with 1 addition and 13 deletions.
diff --git a/tools/NodeConfigCompare/configuration/cloud_formation_template.yaml b/tools/NodeConfigCompare/configuration/cloud_formation_template.yaml
@@ -486,19 +486,7 @@ Resources:
           - Effect: Allow
             Action:
               - ec2:Describe*
-            Resource:
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:elastic-ip/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:client-vpn-endpoint/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:image/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:fleet/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:fpga-image/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:instance/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:snapshot/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:spot-fleet-request/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:volumne/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:elastic-ip/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:vpc/*"
-              - !Sub "arn:aws:ec2:${AWS::Region}:${AWS::AccountId}:vpc-endpoint-service/*"
+            Resource: "*"
 
   RedshiftServerlessIAMPolicy:
     Type: 'AWS::IAM::ManagedPolicy'