Move to generated folder, test with condition removed for CFCloudwatch

cloudera · Dec 11, 2023 · 92cebcc · 92cebcc
1 parent 1df6e6e
commit 92cebcc
Show file tree

Hide file tree

Showing 8 changed files with 8 additions and 704 deletions.
diff --git a/aws-iam-policies/docs/restricted-policy-doc-1.json5 b/aws-iam-policies/docs/restricted-policy-doc-1.json5
@@ -3,7 +3,7 @@
   "Statement": [
     {
       "Sid": "ResourceTag",
-      // Control access to AWS serviceresources based on
+      // Control access to AWS service resources based on
       // resource tags using ResourceTag/key-name
       // condition key to allow access to resource or not
       // based on resource tagging

diff --git a/aws-iam-policies/docs/restricted-policy-doc-2.json5 b/aws-iam-policies/docs/restricted-policy-doc-2.json5
@@ -180,12 +180,7 @@
         // Upload log events to log stream
         "logs:PutRetentionPolicy"
         // Change number of days Cloudwatch retains
-      ],
-      "Condition": {
-        "ForAnyValue:StringEquals": {
-          "aws:CalledVia": "cloudformation.amazonaws.com"
-        }
-      }
+      ]
     },
     {
       "Sid": "CFKeys",

diff --git a/aws-iam-policies/managedArn-node-inline-policy.json b/aws-iam-policies/managedArn-node-inline-policy.json
@@ -5,8 +5,8 @@
       "Sid": "clusterautoscaler",
       "Effect": "Allow",
       "Action": [
-        "autoscaling:DescribeAutoScalingGroups", //comment 1
-        "autoscaling:DescribeAutoScalingInstances", //comment 2
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances",
         "autoscaling:DescribeTags",
         "autoscaling:DescribeLaunchConfigurations",
         "autoscaling:SetDesiredCapacity",

diff --git a/aws-iam-policies/restricted-policy-1.json5 b/aws-iam-policies/restricted-policy-1.json5
diff --git a/aws-iam-policies/restricted-policy-2.json5 b/aws-iam-policies/restricted-policy-2.json5