remove listversionObject and ListBucketVersions access to compute node

aws · Sep 10, 2024 · 824a403 · 824a403
1 parent f480f8f
commit 824a403
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cli/src/pcluster/templates/cdk_builder_utils.py b/cli/src/pcluster/templates/cdk_builder_utils.py
@@ -1035,7 +1035,7 @@ def _build_policy(self) -> List[iam.PolicyStatement]:
             ),
             iam.PolicyStatement(
                 sid="S3GetLaunchTemplate",
-                actions=["s3:GetObject", "s3:ListBucket", "s3:ListObjectVersions", "s3:ListBucketVersions"],
+                actions=["s3:GetObject", "s3:ListBucket"],
                 effect=iam.Effect.ALLOW,
                 resources=[
                     self._format_arn(service="s3", resource=self._cluster_bucket.name, region="", account=""),