Actions
Bug #12
open[SEC] modification policy codepipeline
Start date:
Due date:
% Done:
0%
Estimated time:
(Total: 0:00 h)
Description
Il faudrait modifier la policy de create_ami et deliver_ami pour ne pas autoriser tout les S3
data "aws_iam_policy_document" "codepipeline_policy" {
statement {
actions = [
"s3:*",
"codecommit:*",
"codebuild:BatchGetBuilds",
"codebuild:StartBuild"
]
resources = [
"*",
]
}
}
Actions