From b509e49178daaa6c4654b7c5aa76f0489c5699e6 Mon Sep 17 00:00:00 2001 From: Zachariah Mully Date: Fri, 22 Mar 2019 11:39:41 -0400 Subject: remove unneeded permissions --- ci.template | 112 ------------------------------------------------------------ 1 file changed, 112 deletions(-) diff --git a/ci.template b/ci.template index f29d8d1608..85e741d5f4 100644 --- a/ci.template +++ b/ci.template @@ -1,4 +1,3 @@ - { "AWSTemplateFormatVersion": "2010-09-09", "Description": "mapbox-gl-native travis resources", @@ -84,35 +83,6 @@ ] } }, - { - "PolicyName": "android", - "PolicyDocument": { - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "ec2:DescribeInstances", - "ec2:RunInstances", - "ec2:CreateTags", - "ec2:GetConsoleOutput" - ], - "Resource": [ - "*" - ] - }, - { - "Effect": "Allow", - "Action": "iam:PassRole", - "Resource": { - "Fn::GetAtt": [ - "AndroidRole", - "Arn" - ] - } - } - ] - } - }, { "PolicyName": "cloudwatch-metrics", "PolicyDocument": { @@ -231,72 +201,6 @@ "Ref": "BuildUser" } } - }, - "AndroidRole": { - "Type": "AWS::IAM::Role", - "Properties": { - "AssumeRolePolicyDocument": { - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": [ - "ec2.amazonaws.com" - ] - }, - "Action": [ - "sts:AssumeRole" - ] - } - ] - }, - "Policies": [ - { - "PolicyName": "android-testing", - "PolicyDocument": { - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "s3:PutObject" - ], - "Resource": [ - "arn:aws:s3:::mapbox-gl-testing/android/*" - ] - } - ] - } - }, - { - "PolicyName": "android", - "PolicyDocument": { - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "s3:PutObject" - ], - "Resource": [ - "arn:aws:s3:::mapbox/mapbox-gl-native/android/build/*" - ] - } - ] - } - } - ], - "Path": "/android-gl-build/travis/role/" - } - }, - "AndroidInstanceProfile": { - "Type": "AWS::IAM::InstanceProfile", - "Properties": { - "Roles": [ - { - "Ref": "AndroidRole" - } - ], - "Path": "/android-gl-build/travis/instance-profile/" - } } }, "Outputs": { @@ -312,22 +216,6 @@ "SecretAccessKey" ] } - }, - "AndroidInstanceProfile": { - "Value": { - "Fn::GetAtt": [ - "AndroidInstanceProfile", - "Arn" - ] - } - }, - "AndroidRole": { - "Value": { - "Fn::GetAtt": [ - "AndroidRole", - "Arn" - ] - } } } } -- cgit v1.2.1