Fix delete policy (#50)

Grunet · Aug 4, 2023 · d999437 · d999437
1 parent 91f1e33
commit d999437
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/packages/aws-cloudformation/CHANGELOG.md b/packages/aws-cloudformation/CHANGELOG.md
@@ -10,6 +10,10 @@ What is in scope for breaking changes includes (but isn't necessarily limited to
 
 ## Changes
 
+### v0.1.1
+
+- Fix bug that wouldn't let the delete policy work without also having the create policy
+
 ### v0.1.0
 
 - Created a Cloudformation template to deploy the honeypot as a single task running in an ECS service

diff --git a/packages/aws-cloudformation/templates/honeypot-stack-policies.yaml b/packages/aws-cloudformation/templates/honeypot-stack-policies.yaml
@@ -65,9 +65,11 @@ Resources:
           - Sid: ecs
             Effect: Allow
             Action:
+              - ecs:DescribeClusters
               - ecs:DeleteCluster
+              - ecs:DescribeServices
               - ecs:DeleteService
-              - ecs:DeregisterTaskDefinition
+              # - ecs:DeregisterTaskDefinition # See reason below
             Resource: "*"
             Condition:
               StringEquals:

diff --git a/packages/aws-cloudformation/version.json b/packages/aws-cloudformation/version.json
@@ -1,3 +1,3 @@
 {
-    "version": "0.1.0"
+    "version": "0.1.1"
 }