arn

NixOS · Mar 2, 2024 · f65d8a5 · f65d8a5
1 parent 5e2b0be
commit f65d8a5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tf/iam_github_actions.tf b/tf/iam_github_actions.tf
@@ -52,7 +52,7 @@ data "aws_iam_policy_document" "upload_ami" {
   statement {
     effect = "Deny"
     actions = ["ec2:RunInstances"]
-    resources = ["*"]
+    resources = ["arn:ec2:*:*:instance/*"]
     condition {
       test     = "StringNotEquals"
       variable = "ec2:InstanceType"