fix: get rid of iam permissions for shipper custom resource function

coralogix · Dec 27, 2024 · 1003660 · 1003660
1 parent 4a64ad3
commit 1003660
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+### v1.1.1 / 2025-12-27
+### 🧰 Bug fixes 🧰
+- cds-1747 - Removed `iam:*` permissions from Shipper, as they were leftover from older versions as the Custom Resource use to be responsible for editing the policy directly
+
 ### v1.1.0 / 2025-12-11
 ### 💡 Enhancements (Breaking) 💡
 - cds-1705 - updated support for dynamic value allocation of Application and Subsystem names based on internal metadata

diff --git a/template.yaml b/template.yaml
@@ -1166,12 +1166,6 @@ Resources:
       Runtime: python3.12
       Timeout: 900
       Policies:
-      - Statement:
-        - Sid: IAMaccess
-          Effect: Allow
-          Action:
-            - 'iam:*'
-          Resource: '*'
       - Statement:
         - Sid: EC2Access
           Effect: Allow