From 1d77f8057de83de519b330aeb65f1d6bed59e57d Mon Sep 17 00:00:00 2001
From: Xavier Schildwachter <x.schildwachter@sagebase.org>
Date: Fri, 11 Oct 2024 14:45:35 -0700
Subject: [PATCH] Use cdk role

---
 org-formation/650-identity-providers/_tasks.yaml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/org-formation/650-identity-providers/_tasks.yaml b/org-formation/650-identity-providers/_tasks.yaml
index 148e5b5c..d609890d 100644
--- a/org-formation/650-identity-providers/_tasks.yaml
+++ b/org-formation/650-identity-providers/_tasks.yaml
@@ -809,11 +809,7 @@ GithubOidcNbConvertDeploy:
     ProviderRoleName: !Sub ${resourcePrefix}-${appName}-nbconvert-deploy
     MaxSessionDuration: 7200
     ManagedPolicyArns:
-      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess"
-      - "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
-      - "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess"
-      - "arn:aws:iam::aws:policy/IAMFullAccess"
-      - "arn:aws:iam::aws:policy/AWSCloudFormationFullAccess"
+      - "arn:aws:iam::449435941126:policy/cdk-assume-role-policy"
   TemplatingContext:
     GitHubOrg: "Sage-Bionetworks"
     Repositories: