workshops/eda-workshop-lsf/templates/02-lsf-master.yaml [421:464]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  LSFMasterRole:
      Type: "AWS::IAM::Role"
      Properties:
        Description: AWS service permissions for LSF Resource Connector
        Path: "/"
        AssumeRolePolicyDocument:
          Version: '2012-10-17'
          Statement:
            - 
              Effect: Allow
              Principal:
                Service:
                - "ec2.amazonaws.com"
              Action:
              - "sts:AssumeRole"
        ManagedPolicyArns:
          - "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess"
          - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
        Policies:
          - PolicyName: LSFResourceConnectorPerms
            PolicyDocument:
              Version: 2012-10-17
              Statement:
                - Effect: Allow
                  Action:
                    - ec2:DescribeInstances
                    - ec2:DescribeInstanceStatus
                    - ec2:DescribeKeyPairs
                    - ec2:RunInstances
                    - ec2:TerminateInstances
                    - ec2:CreateTags
                    - ec2:ModifyIdFormat
                    - ec2:AssociateIamInstanceProfile
                    - ec2:ReplaceIamInstanceProfileAssociation
                    - ec2:CancelSpotFleetRequests
                    - ec2:DescribeSpotFleetInstances
                    - ec2:DescribeSpotFleetRequests
                    - ec2:DescribeSpotFleetRequestHistory
                    - ec2:ModifySpotFleetRequest
                    - ec2:RequestSpotFleet
                    - ec2:DescribeSpotInstanceRequests
                    - ec2:DescribeLaunchTemplateVersions
                    - ec2:GetLaunchTemplateData
                    - ec2:CreateLaunchTemplateVersion
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



workshops/eda-workshop-lsf/templates/eda-lsf-simple-workshop.yaml [766:809]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  LSFMasterRole:
      Type: "AWS::IAM::Role"
      Properties:
        Description: AWS service permissions for LSF Resource Connector
        Path: "/"
        AssumeRolePolicyDocument:
          Version: '2012-10-17'
          Statement:
            - 
              Effect: Allow
              Principal:
                Service:
                - "ec2.amazonaws.com"
              Action:
              - "sts:AssumeRole"
        ManagedPolicyArns:
          - "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess"
          - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
        Policies:
          - PolicyName: LSFResourceConnectorPerms
            PolicyDocument:
              Version: 2012-10-17
              Statement:
                - Effect: Allow
                  Action:
                    - ec2:DescribeInstances
                    - ec2:DescribeInstanceStatus
                    - ec2:DescribeKeyPairs
                    - ec2:RunInstances
                    - ec2:TerminateInstances
                    - ec2:CreateTags
                    - ec2:ModifyIdFormat
                    - ec2:AssociateIamInstanceProfile
                    - ec2:ReplaceIamInstanceProfileAssociation
                    - ec2:CancelSpotFleetRequests
                    - ec2:DescribeSpotFleetInstances
                    - ec2:DescribeSpotFleetRequests
                    - ec2:DescribeSpotFleetRequestHistory
                    - ec2:ModifySpotFleetRequest
                    - ec2:RequestSpotFleet
                    - ec2:DescribeSpotInstanceRequests
                    - ec2:DescribeLaunchTemplateVersions
                    - ec2:GetLaunchTemplateData
                    - ec2:CreateLaunchTemplateVersion
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



