@jaypie/constructs 1.2.27 → 1.2.28
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/index.cjs +4 -11
- package/dist/cjs/index.cjs.map +1 -1
- package/dist/esm/index.js +4 -11
- package/dist/esm/index.js.map +1 -1
- package/package.json +1 -1
package/dist/cjs/index.cjs
CHANGED
|
@@ -3042,23 +3042,15 @@ class JaypieGitHubDeployRole extends constructs.Construct {
|
|
|
3042
3042
|
actions: [
|
|
3043
3043
|
"cloudformation:CreateStack",
|
|
3044
3044
|
"cloudformation:DeleteStack",
|
|
3045
|
-
"cloudformation:
|
|
3046
|
-
"cloudformation:DescribeStackResource",
|
|
3047
|
-
"cloudformation:DescribeStackResources",
|
|
3048
|
-
"cloudformation:DescribeStacks",
|
|
3045
|
+
"cloudformation:Describe*",
|
|
3049
3046
|
"cloudformation:GetTemplate",
|
|
3050
3047
|
"cloudformation:SetStackPolicy",
|
|
3051
3048
|
"cloudformation:UpdateStack",
|
|
3052
3049
|
"cloudformation:ValidateTemplate",
|
|
3053
|
-
"ec2:
|
|
3054
|
-
"ec2:DescribeNetworkInterfaces",
|
|
3055
|
-
"ec2:DescribeRouteTables",
|
|
3056
|
-
"ec2:DescribeSecurityGroups",
|
|
3057
|
-
"ec2:DescribeSubnets",
|
|
3058
|
-
"ec2:DescribeVpcs",
|
|
3050
|
+
"ec2:Describe*",
|
|
3059
3051
|
"iam:PassRole",
|
|
3060
3052
|
"route53:ListHostedZones*",
|
|
3061
|
-
"s3:GetObject",
|
|
3053
|
+
"s3:GetObject", // TODO: this should be restricted by bucket
|
|
3062
3054
|
"s3:ListBucket",
|
|
3063
3055
|
"ssm:GetParameter",
|
|
3064
3056
|
"ssm:GetParameters",
|
|
@@ -3072,6 +3064,7 @@ class JaypieGitHubDeployRole extends constructs.Construct {
|
|
|
3072
3064
|
resources: [
|
|
3073
3065
|
"arn:aws:iam::*:role/cdk-hnb659fds-deploy-role-*",
|
|
3074
3066
|
"arn:aws:iam::*:role/cdk-hnb659fds-file-publishing-*",
|
|
3067
|
+
"arn:aws:iam::*:role/cdk-hnb659fds-lookup-role-*",
|
|
3075
3068
|
"arn:aws:iam::*:role/cdk-readOnlyRole",
|
|
3076
3069
|
],
|
|
3077
3070
|
}));
|