Skip to content
Snippets Groups Projects
Commit a180d7fc authored by Barclay Walsh's avatar Barclay Walsh
Browse files

Commented out a problem policy creating 409 errors.

parent 11bd54da
No related branches found
No related tags found
1 merge request!6Trusted ibm
......@@ -184,23 +184,23 @@ Resources:
SnapshotOptions:
AutomatedSnapshotStartHour: "0"
AccessPolicies:
- Version: "2012-10-17"
Statement:
- Effect: "Allow"
Principal:
AWS:
- !Sub arn:aws:iam::${AWS::AccountId}:root
- Fn::ImportValue:
!Sub "${Environment}-IndexerServiceIamUserArn"
# TODO: need to create cognito user and identity pool and link it to principal for dynamic creation
- "arn:aws:iam::888733619319:role/Cognito_osduelasticsearchAuth_Role"
Action:
- "es:*"
- 'es:ESHttp*'
- 'cognito-identity:*'
- 'cognito-idp:*'
- 'sts:AssumeRole'
Resource: !Sub arn:aws:es:us-east-1:846973539254:domain/${Environment}-${ElasticsearchDomainName}/*
# - Version: "2012-10-17"
# Statement:
# - Effect: "Allow"
# Principal:
# AWS:
# - !Sub arn:aws:iam::${AWS::AccountId}:root
# - Fn::ImportValue:
# !Sub "${Environment}-IndexerServiceIamUserArn"
# # TODO: need to create cognito user and identity pool and link it to principal for dynamic creation
# - "arn:aws:iam::888733619319:role/Cognito_osduelasticsearchAuth_Role"
# Action:
# - "es:*"
# - 'es:ESHttp*'
# - 'cognito-identity:*'
# - 'cognito-idp:*'
# - 'sts:AssumeRole'
# Resource: !Sub arn:aws:es:us-east-1:846973539254:domain/${Environment}-${ElasticsearchDomainName}/*
- "Version": "2012-10-17"
"Statement":
- "Effect": "Allow"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment