feat: use temporary IAM credentials instead of IAM user

GemeenteNijmegen · May 14, 2024 · 3c4f158 · 3c4f158
1 parent ccd3d32
commit 3c4f158
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/Configuration.ts b/src/Configuration.ts
@@ -82,8 +82,7 @@ export const configurations: { [key: string]: Configuration } = {
     deployFromEnvironment: Statics.deploymentEnvironment,
     deployToEnvironment: Statics.acceptanceEnvironment,
     sessionEndpointAllowList: [
-      'arn:aws:iam::699363516011:role/yivi-issue-api-api-stack-yiviissueissuefunctionlam-1AAD4D76XTRK5', // webapp new lz
-      'arn:aws:iam::315037222840:role/yivi-issue-api-api-stack-yiviissueissuefunctionlam-13P8QZIPPJXI1', // webapp old lz
+      'arn:aws:iam::699363516011:role/yivi-issue-api-api-stack-yiviissueissuefunctionlam-1AAD4D76XTRK5',
     ],
     sessionEndpointIamUser: true,
     useSpotInstances: true,
@@ -98,7 +97,7 @@ export const configurations: { [key: string]: Configuration } = {
     deployFromEnvironment: Statics.deploymentEnvironment,
     deployToEnvironment: Statics.productionEnvironment,
     sessionEndpointAllowList: [
-      // This cannot be used currently (webapp does not offer support yet)
+      'arn:aws:iam::185512167111:role/yivi-issue-api-api-stack-yiviissueissuefunctionlam-TFTCG5EPAX36',
     ],
     sessionEndpointIamUser: true,
     criticality: new Criticality('high'),