remove launch template permissions

platform9 · Sep 2, 2024 · 31bd3db · 31bd3db
1 parent 120fc45
commit 31bd3db
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/emp/emp_role_cftemplate.yaml b/emp/emp_role_cftemplate.yaml
@@ -156,19 +156,19 @@ Resources:
               # commenting out capa actions, reason: we don't use machinepools, and just scale the md
 #              - autoscaling:DescribeAutoScalingGroups
 #              - autoscaling:DescribeInstanceRefreshes
-              - ec2:CreateLaunchTemplate
-              - ec2:CreateLaunchTemplateVersion
-              - ec2:DescribeLaunchTemplates
-              - ec2:DescribeLaunchTemplateVersions
-              - ec2:DeleteLaunchTemplate
-              - ec2:DeleteLaunchTemplateVersions
+#              - ec2:CreateLaunchTemplate
+#              - ec2:CreateLaunchTemplateVersion
+#              - ec2:DescribeLaunchTemplates
+#              - ec2:DescribeLaunchTemplateVersions
+#              - ec2:DeleteLaunchTemplate
+#              - ec2:DeleteLaunchTemplateVersions
               - ec2:DescribeKeyPairs
               - ec2:ModifyInstanceMetadataOptions
             Effect: Allow
             Resource:
               - '*'
 #          - Action:
-#              # # commenting out capa actions, reason: we don't use machinepools, and just scale the md
+              # commenting out capa actions, reason: we don't use machinepools, and just scale the md
 #              - autoscaling:CreateAutoScalingGroup
 #              - autoscaling:UpdateAutoScalingGroup
 #              - autoscaling:CreateOrUpdateTags