Use cdk role

Sage-Bionetworks-IT · Oct 11, 2024 · 1d77f80 · 1d77f80
1 parent 495f0c4
commit 1d77f80
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/org-formation/650-identity-providers/_tasks.yaml b/org-formation/650-identity-providers/_tasks.yaml
@@ -809,11 +809,7 @@ GithubOidcNbConvertDeploy:
     ProviderRoleName: !Sub ${resourcePrefix}-${appName}-nbconvert-deploy
     MaxSessionDuration: 7200
     ManagedPolicyArns:
-      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess"
-      - "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
-      - "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess"
-      - "arn:aws:iam::aws:policy/IAMFullAccess"
-      - "arn:aws:iam::aws:policy/AWSCloudFormationFullAccess"
+      - "arn:aws:iam::449435941126:policy/cdk-assume-role-policy"
   TemplatingContext:
     GitHubOrg: "Sage-Bionetworks"
     Repositories: