From f7d55bb56c3ae5d5b241c25464769f269eac3995 Mon Sep 17 00:00:00 2001 From: Ritvik Kapila Date: Wed, 16 Oct 2024 21:41:56 -0700 Subject: [PATCH 1/2] chore(CI.yaml): update cfn template --- cfn/CI.yaml | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/cfn/CI.yaml b/cfn/CI.yaml index 10ef4d712..7718a066d 100644 --- a/cfn/CI.yaml +++ b/cfn/CI.yaml @@ -66,11 +66,16 @@ Resources: { "Version": "2012-10-17", "Statement": [ - { + { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" }, "Action": "sts:AssumeRole" }, + { + ""Effect": "Allow", + "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" }, + "Action": "sts:AssumeRole" + }, { "Effect": "Allow", "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" }, @@ -103,11 +108,16 @@ Resources: { "Version": "2012-10-17", "Statement": [ - { + { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" }, "Action": "sts:AssumeRole" }, + { + ""Effect": "Allow", + "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" }, + "Action": "sts:AssumeRole" + }, { "Effect": "Allow", "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" }, From e8cd8734fd0bb47ab38d6468c1d29159399843d2 Mon Sep 17 00:00:00 2001 From: Ritvik Kapila Date: Thu, 17 Oct 2024 10:23:03 -0700 Subject: [PATCH 2/2] fix --- cfn/CI.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cfn/CI.yaml b/cfn/CI.yaml index 7718a066d..f449b9d4a 100644 --- a/cfn/CI.yaml +++ b/cfn/CI.yaml @@ -72,7 +72,7 @@ Resources: "Action": "sts:AssumeRole" }, { - ""Effect": "Allow", + "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" }, "Action": "sts:AssumeRole" }, @@ -114,7 +114,7 @@ Resources: "Action": "sts:AssumeRole" }, { - ""Effect": "Allow", + "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" }, "Action": "sts:AssumeRole" },