Update launch template test to use permitted harmless managed policy

ansible-collections · Dec 11, 2020 · ed35000 · ed35000
1 parent 0e0318a
commit ed35000
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...rgets/ec2_launch_template/playbooks/roles/ec2_launch_template/tasks/iam_instance_role.yml b/...rgets/ec2_launch_template/playbooks/roles/ec2_launch_template/tasks/iam_instance_role.yml
@@ -6,7 +6,7 @@
         state: present
         create_instance_profile: yes
         managed_policy:
-        - AmazonS3ReadOnlyAccess
+        - AWSDenyAll
       register: iam_role
 
     - name: Create second IAM role for test
@@ -16,7 +16,7 @@
         state: present
         create_instance_profile: yes
         managed_policy:
-        - AmazonS3ReadOnlyAccess
+        - AWSDenyAll
       register: iam_role_2
 
     - name: Make instance with an instance_role