source/packages/libraries/core/deployment-helper/infrastructure/cfn-deployment-helper-vpc.yaml [79:133]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: 'AWS::IAM::ManagedPolicy'
    Metadata:
      cfn_nag:
        rules_to_suppress:
          - id: W13
            reason: 'EC2 full access on resources is to manage unnamed resources'
    Properties:
      Description: 'CDF Core application configuration override'
      Path: '/'
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Sid: 'iot'
            Action:
              - 'iot:*'
            Effect: Allow
            Resource: '*'
          - Sid: 'sts'
            Action:
              - 'sts:*'
            Effect: Allow
            Resource: '*'
          - Sid: 'eventbridge'
            Action:
              - 'events:PutEvents'
            Effect: Allow
            Resource: '*'
          - Sid: 'iampassrole'
            Action:
              - 'iam:PassRole'
            Effect: Allow
            Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/cdf-*'
          - Effect: Allow
            Action:
              - 's3:ListBucket'
              - 's3:GetObject'
            Resource:
              - !Sub 'arn:aws:s3:::${ArtifactsBucket}'
          - Action:
              - 'ec2:DescribeVpcEndpoints'
            Effect: Allow
            Resource: '*'
          - Sid: 'lambda'
            Action:
              - 'lambda:AddPermission'
              - 'lambda:CreateEventSourceMapping'
              - 'lambda:DeleteEventSourceMapping'
              - 'lambda:ListEventSourceMappings'
            Effect: Allow
            Resource: '*'
          - Action:
              - 'lambda:Invoke*'
            Effect: Allow
            Resource:
              - !Sub 'arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:cdf-*'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



source/packages/libraries/core/deployment-helper/infrastructure/cfn-deployment-helper.yaml [103:157]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: 'AWS::IAM::ManagedPolicy'
    Metadata:
      cfn_nag:
        rules_to_suppress:
          - id: W13
            reason: 'EC2 full access on resources is to manage unnamed resources'
    Properties:
      Description: 'CDF Core application configuration override'
      Path: '/'
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Sid: 'iot'
            Action:
              - 'iot:*'
            Effect: Allow
            Resource: '*'
          - Sid: 'sts'
            Action:
              - 'sts:*'
            Effect: Allow
            Resource: '*'
          - Sid: 'eventbridge'
            Action:
              - 'events:PutEvents'
            Effect: Allow
            Resource: '*'
          - Sid: 'iampassrole'
            Action:
              - 'iam:PassRole'
            Effect: Allow
            Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/cdf-*'
          - Effect: Allow
            Action:
              - 's3:ListBucket'
              - 's3:GetObject'
            Resource:
              - !Sub 'arn:aws:s3:::${ArtifactsBucket}'
          - Action:
              - 'ec2:DescribeVpcEndpoints'
            Effect: Allow
            Resource: '*'
          - Sid: 'lambda'
            Action:
              - 'lambda:AddPermission'
              - 'lambda:CreateEventSourceMapping'
              - 'lambda:DeleteEventSourceMapping'
              - 'lambda:ListEventSourceMappings'
            Effect: Allow
            Resource: '*'
          - Action:
              - 'lambda:Invoke*'
            Effect: Allow
            Resource:
              - !Sub 'arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:cdf-*'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



