Skip to content

C
configuration
Commit b7ab6d2b by Feanil Patel
Options

Merge pull request #919 from edx/feanil/update_cfn_iam 

Add an instance profile to forums boxes.
parents 22941c38 99da90a2
Showing with 82 additions and 0 deletions
cloudformation_templates/edx-reference-architecture.json
...@@ -2951,6 +2951,25 @@ ...@@ -2951,6 +2951,25 @@
} ] } ]
}, },
"Path": "/" "Path": "/"
"Policies": [ {
"PolicyName": "ForumBasePolicy",
"PolicyDocument": {
"Statement":[
{
"Effect":"Allow",
"Action":[
"cloudformation:DescribeStackResource",
"ses:SendEmail",
"ses:SendRawEmail",
"ses:GetSendQuota",
"ec2:DescribeInstances",
"ec2:DescribeTags"
],
"Resource":"*"
}
]
}
} ]
} }
}, },
"XqueueInstanceProfile": { "XqueueInstanceProfile": {
...@@ -2975,6 +2994,25 @@ ...@@ -2975,6 +2994,25 @@
} ] } ]
}, },
"Path": "/" "Path": "/"
"Policies": [ {
"PolicyName": "EdxAppBasePolicy",
"PolicyDocument": {
"Statement":[
{
"Effect":"Allow",
"Action":[
"cloudformation:DescribeStackResource",
"ses:SendEmail",
"ses:SendRawEmail",
"ses:GetSendQuota",
"ec2:DescribeInstances",
"ec2:DescribeTags"
],
"Resource":"*"
}
]
}
} ]
} }
}, },
"XServerInstanceProfile": { "XServerInstanceProfile": {
...@@ -2986,6 +3024,49 @@ ...@@ -2986,6 +3024,49 @@
} ] } ]
} }
}, },
"ForumRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [ {
"Effect": "Allow",
"Principal": {
"Service": [ "ec2.amazonaws.com" ]
},
"Action": [ "sts:AssumeRole" ]
} ]
},
"Path": "/"
"Policies": [ {
"PolicyName": "EdxAppBasePolicy",
"PolicyDocument": {
"Statement":[
{
"Effect":"Allow",
"Action":[
"cloudformation:DescribeStackResource",
"ses:SendEmail",
"ses:SendRawEmail",
"ses:GetSendQuota",
"ec2:DescribeInstances",
"ec2:DescribeTags"
],
"Resource":"*"
}
]
}
} ]
}
},
"ForumInstanceProfile": {
"Type": "AWS::IAM::InstanceProfile",
"Properties": {
"Path": "/",
"Roles": [ {
"Ref": "ForumRole"
} ]
}
},
"AdminSecurityGroup":{ "AdminSecurityGroup":{
"Type":"AWS::EC2::SecurityGroup", "Type":"AWS::EC2::SecurityGroup",
"Properties":{ "Properties":{
...@@ -4880,6 +4961,7 @@ ...@@ -4880,6 +4961,7 @@
"ForumServer":{ "ForumServer":{
"Type":"AWS::AutoScaling::LaunchConfiguration", "Type":"AWS::AutoScaling::LaunchConfiguration",
"Properties":{ "Properties":{
"IamInstanceProfile":{ "Ref":"ForumInstanceProfile" },
"SecurityGroups":[ "SecurityGroups":[
{ {
"Ref":"ForumServerSecurityGroup" "Ref":"ForumServerSecurityGroup"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment