remove unneeded permissions (#14208)

This commit is contained in:
Zack Mully
2019-03-22 16:00:31 -04:00
committed by GitHub
parent dcd6efd5b5
commit c78b60bf35

View File

@@ -1,4 +1,3 @@
{
"AWSTemplateFormatVersion": "2010-09-09",
"Description": "mapbox-gl-native travis resources",
@@ -84,35 +83,6 @@
]
}
},
{
"PolicyName": "android",
"PolicyDocument": {
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeInstances",
"ec2:RunInstances",
"ec2:CreateTags",
"ec2:GetConsoleOutput"
],
"Resource": [
"*"
]
},
{
"Effect": "Allow",
"Action": "iam:PassRole",
"Resource": {
"Fn::GetAtt": [
"AndroidRole",
"Arn"
]
}
}
]
}
},
{
"PolicyName": "cloudwatch-metrics",
"PolicyDocument": {
@@ -231,72 +201,6 @@
"Ref": "BuildUser"
}
}
},
"AndroidRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": [
"ec2.amazonaws.com"
]
},
"Action": [
"sts:AssumeRole"
]
}
]
},
"Policies": [
{
"PolicyName": "android-testing",
"PolicyDocument": {
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::mapbox-gl-testing/android/*"
]
}
]
}
},
{
"PolicyName": "android",
"PolicyDocument": {
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::mapbox/mapbox-gl-native/android/build/*"
]
}
]
}
}
],
"Path": "/android-gl-build/travis/role/"
}
},
"AndroidInstanceProfile": {
"Type": "AWS::IAM::InstanceProfile",
"Properties": {
"Roles": [
{
"Ref": "AndroidRole"
}
],
"Path": "/android-gl-build/travis/instance-profile/"
}
}
},
"Outputs": {
@@ -312,22 +216,6 @@
"SecretAccessKey"
]
}
},
"AndroidInstanceProfile": {
"Value": {
"Fn::GetAtt": [
"AndroidInstanceProfile",
"Arn"
]
}
},
"AndroidRole": {
"Value": {
"Fn::GetAtt": [
"AndroidRole",
"Arn"
]
}
}
}
}