remove listversionObject and ListBucketVersions access to compute node

aws · Oct 29, 2024 · 522ad2a · 522ad2a
1 parent 31f56ff
commit 522ad2a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cli/src/pcluster/templates/cdk_builder_utils.py b/cli/src/pcluster/templates/cdk_builder_utils.py
@@ -1035,7 +1035,7 @@ def _build_policy(self) -> List[iam.PolicyStatement]:
             ),
             iam.PolicyStatement(
                 sid="S3GetLaunchTemplate",
-                actions=["s3:GetObject", "s3:ListBucket", "s3:ListObjectVersions", "s3:ListBucketVersions"],
+                actions=["s3:GetObject", "s3:ListBucket"],
                 effect=iam.Effect.ALLOW,
                 resources=[
                     self._format_arn(service="s3", resource=self._cluster_bucket.name, region="", account=""),