fix: AppDeployer needs perms to create new env (awslabs#762)

* fix: AppDeployer needs perms to create new env * fix: AppDeployer specific changes only * removing unrelated changes
jxuamazon · Oct 19, 2021 · 475f49a · 475f49a
1 parent 81f20d0
commit 475f49a
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/main/cicd/cicd-pipeline/config/infra/cloudformation.yml b/main/cicd/cicd-pipeline/config/infra/cloudformation.yml
@@ -20,8 +20,7 @@ Resources:
     Type: AWS::SNS::Topic
     Properties: !If
       - SubscribeNotificationEmail
-      -
-        Subscription:
+      - Subscription:
           - Endpoint: ${self:custom.settings.emailForNotifications}
             Protocol: email
         KmsMasterKeyId: alias/aws/sns
@@ -229,7 +228,7 @@ Resources:
           - Action:
               - iam:PassRole
             Effect: Allow
-            Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/${self:custom.settings.namespace}-cicd-pipeline-AppDeployerRole-*'
+            Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/${self:custom.settings.namespace}-*'
           - Action:
               - iam:CreatePolicy
               - iam:GetPolicy