Added s3 and glue required permissions and removed obsoletes

2026-02-11 07:15:15 +00:00 · 2021-07-27 14:49:58 +02:00
parent c32fa9aa1f
commit ffe147b5b5
1 changed files with 1 additions and 3 deletions
--- a/iam/create_role_to_assume_cfn.yaml
+++ b/iam/create_role_to_assume_cfn.yaml
@@ -55,14 +55,12 @@ Resources:
            Statement:
            - Effect: Allow
              Action:
-                - 'dax:ListTables'
                - 'ds:ListAuthorizedApplications'
-                - 'ds:DescribeRoles'
                - 'ec2:GetEbsEncryptionByDefault'
                - 'ecr:Describe*'
                - 'support:Describe*'
                - 'tag:GetTagKeys'
                - 'lambda:GetFunction'
-                - 'glue:GetConnections',
+                - 'glue:GetConnections'
                - 's3:GetAccountPublicAccessBlock'
              Resource: '*'