adding !Sub for ARNs previously not using !Sub

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-sub.html https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/pseudo-parameter-reference.html https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#arns-syntax
widdix · Dec 20, 2021 · 4b5f491 · 4b5f491
1 parent 6feb3e1
commit 4b5f491
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/ecs/service-cluster-alb.yaml b/ecs/service-cluster-alb.yaml
@@ -303,7 +303,7 @@ Resources:
     Type: 'AWS::IAM::Role'
     Properties:
       ManagedPolicyArns:
-      - 'arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole'
+      - !Sub 'arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole'
       AssumeRolePolicyDocument:
         Version: '2008-10-17'
         Statement:

diff --git a/ecs/service-dedicated-alb.yaml b/ecs/service-dedicated-alb.yaml
@@ -411,7 +411,7 @@ Resources:
     Type: 'AWS::IAM::Role'
     Properties:
       ManagedPolicyArns:
-      - 'arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole'
+      - !Sub 'arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole'
       AssumeRolePolicyDocument:
         Version: '2008-10-17'
         Statement:

diff --git a/security/config.yaml b/security/config.yaml
@@ -108,7 +108,7 @@ Resources:
     Type: 'AWS::IAM::Role'
     Properties:
       ManagedPolicyArns:
-      - 'arn:aws:iam::aws:policy/service-role/AWSConfigRole'
+      - !Sub 'arn:${AWS::Partition}:iam::aws:policy/service-role/AWSConfigRole'
       AssumeRolePolicyDocument:
         Version: '2012-10-17'
         Statement:
@@ -144,7 +144,7 @@ Resources:
     Type: 'AWS::IAM::Role'
     Properties:
       ManagedPolicyArns:
-      - 'arn:aws:iam::aws:policy/service-role/AWSConfigRole'
+      - !Sub 'arn:${AWS::Partition}:iam::aws:policy/service-role/AWSConfigRole'
       AssumeRolePolicyDocument:
         Version: '2012-10-17'
         Statement: