Replaced "events:DescribeRule" with "events:ListRules" permission for…

… capability resource handler (#20)
aws-cloudformation · Dec 28, 2023 · df63fe2 · df63fe2
1 parent c155ed2
commit df63fe2
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/aws-b2bi-capability/aws-b2bi-capability.json b/aws-b2bi-capability/aws-b2bi-capability.json
@@ -226,9 +226,7 @@
       "permissions": [
         "b2bi:CreateCapability",
         "b2bi:TagResource",
-        "s3:GetObject",
-        "s3:ListBucket",
-        "events:DescribeRule",
+        "events:ListRules",
         "events:PutRule",
         "events:PutTargets",
         "logs:CreateLogDelivery",
@@ -239,7 +237,9 @@
         "logs:DescribeResourcePolicies",
         "logs:ListLogDeliveries",
         "logs:PutLogEvents",
-        "logs:PutResourcePolicy"
+        "logs:PutResourcePolicy",
+        "s3:GetObject",
+        "s3:ListBucket"
       ]
     },
     "read": {

diff --git a/aws-b2bi-capability/resource-role.yaml b/aws-b2bi-capability/resource-role.yaml
@@ -38,7 +38,7 @@ Resources:
                 - "b2bi:TagResource"
                 - "b2bi:UntagResource"
                 - "b2bi:UpdateCapability"
-                - "events:DescribeRule"
+                - "events:ListRules"
                 - "events:PutRule"
                 - "events:PutTargets"
                 - "logs:CreateLogDelivery"