awslabs#270 - CodePipeline/Codebuild now uses a separate ArtifactStor…

…age bucket.
mdaehnert · Jun 5, 2020 · 014be0a · 014be0a
1 parent 8ae0f35
commit 014be0a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/template.yml b/src/template.yml
@@ -80,6 +80,9 @@ Resources:
               - !Sub arn:aws:s3:::${BootstrapTemplatesBucket}/*
             Principal:
               AWS: !Ref AWS::AccountId
+  BootstrapArtifactStorageBucket:
+    DeletionPolicy: Retain
+    Type: AWS::S3::Bucket
   BootstrapTemplatesBucket:
     Type: "AWS::S3::Bucket"
     DeletionPolicy: Retain
@@ -413,6 +416,8 @@ Resources:
             Resource:
               - "arn:aws:s3:::serverlessrepo-aws-deplo-bootstraptemplatesbucket-*"
               - "arn:aws:s3:::serverlessrepo-aws-deplo-bootstraptemplatesbucket-*/*"
+              - !GetAtt BootstrapArtifactStorageBucket.Arn
+              - !Sub "${BootstrapArtifactStorageBucket.Arn}/*"
               - "arn:aws:s3:::adf-shared-modules-*-*"
               - "arn:aws:s3:::adf-shared-modules-*-*/*"
           - Effect: "Allow"
@@ -496,7 +501,7 @@ Resources:
     Properties:
       ArtifactStore:
         Type: S3
-        Location: !Ref BootstrapTemplatesBucket
+        Location: !Ref BootstrapArtifactStorageBucket
       RoleArn: !GetAtt CodePipelineRole.Arn
       Name: 'aws-deployment-framework-bootstrap-pipeline'
       Stages: