chore(CI.yaml): update cfn template (#687)

aws · Oct 17, 2024 · 864c2e2 · 864c2e2
1 parent 83744db
commit 864c2e2
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/cfn/CI.yaml b/cfn/CI.yaml
@@ -66,11 +66,16 @@ Resources:
         {
           "Version": "2012-10-17",   
           "Statement": [
-          {
+            {
               "Effect": "Allow",
               "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" },
               "Action": "sts:AssumeRole"
             },
+            {
+              "Effect": "Allow",
+              "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" },
+              "Action": "sts:AssumeRole"
+            },
             {
               "Effect": "Allow",
               "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" },
@@ -103,11 +108,16 @@ Resources:
         {
           "Version": "2012-10-17",   
           "Statement": [
-          {
+            {
               "Effect": "Allow",
               "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" },
               "Action": "sts:AssumeRole"
             },
+            {
+              "Effect": "Allow",
+              "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" },
+              "Action": "sts:AssumeRole"
+            },
             {
               "Effect": "Allow",
               "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" },