Skip to content

Commit

Permalink
chore(aws-cdk-testing): fix integ test case using unrestricted princi…
Browse files Browse the repository at this point in the history
…pal for role

This test case is flagged up by automated security tooling.
There is no actual risk since this is a test stack that is only short-lived and the permissions for the role only allow consuming messages from a queue that doesn't hold any data.
  • Loading branch information
mrgrain committed Dec 18, 2023
1 parent 1a9c30e commit a7b7306
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ class SimpleStack extends cdk.Stack {
visibilityTimeout: cdk.Duration.seconds(300),
});
const role = new iam.Role(this, 'role', {
assumedBy: new iam.AnyPrincipal(),
assumedBy: new iam.AccountRootPrincipal(),
});
queue.grantConsumeMessages(role);
}
Expand Down

0 comments on commit a7b7306

Please sign in to comment.