summaryrefslogtreecommitdiff
path: root/hacking/aws_config
diff options
context:
space:
mode:
Diffstat (limited to 'hacking/aws_config')
-rw-r--r--hacking/aws_config/testing_policies/devops-policy.json22
1 files changed, 22 insertions, 0 deletions
diff --git a/hacking/aws_config/testing_policies/devops-policy.json b/hacking/aws_config/testing_policies/devops-policy.json
index fa7359b6d0..b07ce88542 100644
--- a/hacking/aws_config/testing_policies/devops-policy.json
+++ b/hacking/aws_config/testing_policies/devops-policy.json
@@ -12,6 +12,28 @@
"Resource": [
"*"
]
+ },
+ {
+ "Sid": "AllowCloudformationTests",
+ "Effect": "Allow",
+ "Action": [
+ "cloudformation:CreateChangeSet",
+ "cloudformation:CreateStack",
+ "cloudformation:DeleteChangeSet",
+ "cloudformation:DeleteStack",
+ "cloudformation:DescribeChangeSet",
+ "cloudformation:DescribeStackEvents",
+ "cloudformation:DescribeStacks",
+ "cloudformation:GetStackPolicy",
+ "cloudformation:GetTemplate",
+ "cloudformation:ListChangeSets",
+ "cloudformation:ListStackResources",
+ "cloudformation:UpdateStack",
+ "cloudformation:UpdateTerminationProtection"
+ ],
+ "Resource": [
+ "*"
+ ]
}
]
}