fix(aws-ecs): scope drainhook permissions to container instance

piradeepk · Jul 3, 2019 · 2f42267 · 2f42267
1 parent 4bd45e7
commit 2f42267
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/@aws-cdk/aws-ecs/lib/drain-hook/instance-drain-hook.ts b/packages/@aws-cdk/aws-ecs/lib/drain-hook/instance-drain-hook.ts
@@ -70,7 +70,7 @@ export class InstanceDrainHook extends cdk.Construct {
       heartbeatTimeout: drainTime,
     });
 
-    const containerInstanceResource = Stack.of(this).formatArn({
+    const containerInstanceArn = Stack.of(this).formatArn({
       service: 'ecs',
       resource: 'containerInstance',
       resourceName: props.cluster.clusterName.concat('*')
@@ -115,7 +115,7 @@ export class InstanceDrainHook extends cdk.Construct {
         'ecs:UpdateContainerInstancesState',
         'ecs:ListTasks'
       ],
-      resources: [containerInstanceResource]
+      resources: [containerInstanceArn]
     }));
   }
 }