diff options
| author | Will Thames <will@thames.id.au> | 2018-05-25 20:31:54 +1000 |
|---|---|---|
| committer | Ryan Brown <sb@ryansb.com> | 2018-05-25 06:31:54 -0400 |
| commit | 809c7404ab213768db22a6e87a3504f07a0aa3f2 (patch) | |
| tree | 30d43d588ebf0cd4db05b50dafb3caf81f704b51 /hacking/aws_config | |
| parent | 5dd3aa26ea5739531303d629d46ee189824570ac (diff) | |
| download | ansible-809c7404ab213768db22a6e87a3504f07a0aa3f2.tar.gz | |
Add two missing VPC permissions (#37896)
Remove VPC permissions from network-policy.json as they mostly duplicate
compute-policy.json permissions - separating the VPC and compute permissions
would likely lead to further confusion.
Diffstat (limited to 'hacking/aws_config')
| -rw-r--r-- | hacking/aws_config/testing_policies/compute-policy.json | 2 | ||||
| -rw-r--r-- | hacking/aws_config/testing_policies/network-policy.json | 15 |
2 files changed, 2 insertions, 15 deletions
diff --git a/hacking/aws_config/testing_policies/compute-policy.json b/hacking/aws_config/testing_policies/compute-policy.json index b644d195f8..c9f31a4062 100644 --- a/hacking/aws_config/testing_policies/compute-policy.json +++ b/hacking/aws_config/testing_policies/compute-policy.json @@ -77,8 +77,10 @@ "ec2:Describe*", "ec2:DisassociateAddress", "ec2:DisassociateRouteTable", + "ec2:DisassociateSubnetCidrBlock", "ec2:ImportKeyPair", "ec2:ModifyImageAttribute", + "ec2:ModifySubnetAttribute", "ec2:ModifyVpcAttribute", "ec2:RegisterImage", "ec2:ReleaseAddress", diff --git a/hacking/aws_config/testing_policies/network-policy.json b/hacking/aws_config/testing_policies/network-policy.json index d5035c7f67..a5f921be86 100644 --- a/hacking/aws_config/testing_policies/network-policy.json +++ b/hacking/aws_config/testing_policies/network-policy.json @@ -2,21 +2,6 @@ "Version": "2012-10-17", "Statement": [ { - "Sid": "ManageVPCsForRoute53Testing", - "Effect": "Allow", - "Action": [ - "ec2:CreateTags", - "ec2:CreateVpc", - "ec2:DeleteVpc", - "ec2:DescribeTags", - "ec2:DescribeVpcAttribute", - "ec2:DescribeVpcClassicLink", - "ec2:DescribeVpcs", - "ec2:ModifyVpcAttribute" - ], - "Resource": "*" - }, - { "Sid": "ManageRoute53ForTests", "Effect": "Allow", "Action": [ |