issue #19 (#20)

added missing sns:Publish to bootstrap role
awslabs · Apr 29, 2019 · 0e18122 · 0e18122
1 parent 3ff56fd
commit 0e18122
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 5 deletions.
diff --git a/servicecatalog_puppet/manifests/manifest-simple.yaml b/servicecatalog_puppet/manifests/manifest-simple.yaml
@@ -5,18 +5,18 @@ schema: puppet-2019-04-01
 accounts:
   - account_id: '<YOUR_ACCOUNT_ID>'
     name: '<YOUR_ACCOUNT_NAME>'
-    default_region: us-east-1
+    default_region: eu-west-1
     regions_enabled:
-      - us-east-1
-      - us-west-2
+      - eu-west-1
+      - eu-west-1
     tags:
       - type:prod
-      - partition:us
+      - partition:eu
       - scope:pci
 
 launches:
   account-iam-for-prod:
-    portfolio: example-simple-central-it-team-portfolio
+    portfolio: demo-central-it-team-portfolio
     product: account-iam
     version: v1
     parameters:

diff --git a/servicecatalog_puppet/servicecatalog-puppet-spoke.template.yaml b/servicecatalog_puppet/servicecatalog-puppet-spoke.template.yaml
@@ -53,6 +53,9 @@ Resources:
               - Effect: "Allow"
                 Action: servicecatalog:ListPortfolios
                 Resource: !Sub "arn:aws:catalog:*:${AWS::AccountId}:product/*"
+              - Effect: "Allow"
+                Action: sns:Publish
+                Resource: !Sub "arn:aws:sns:*:${PuppetAccountId}:servicecatalog-puppet-cloudformation-events"
 
       AssumeRolePolicyDocument:
         Version: "2012-10-17"