ci: Update Resource IMDSv1 Permissions (aws#4360)

engedaam · Aug 1, 2023 · 952f991 · 952f991
1 parent 9f325c1
commit 952f991
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/test/cloudformation/iam_cloudformation.yaml b/test/cloudformation/iam_cloudformation.yaml
@@ -466,14 +466,14 @@ Resources:
           - Effect: Deny
             Action:
               - ec2:RunInstances
-            Resource: "*"
+            Resource: !Sub "arn:${AWS::Partition}:ec2:*:${AWS::AccountId}:instance/*"
             Condition:
               StringNotEquals:
                 ec2:MetadataHttpTokens: required
           - Effect: Deny
             Action:
               - ec2:ModifyInstanceMetadataOptions
-            Resource: "*"
+            Resource: !Sub "arn:${AWS::Partition}:ec2:*:${AWS::AccountId}:instance/*"
             Condition:
               StringEquals:
                 ec2:Attribute: HttpTokens