Update Route53 IAM policy so the Route53 tests run (#64886)

5 years ago · a815fdf8bb
parent c9d3c9e233
commit a815fdf8bb
2 changed files with 3 additions and 1 deletions
--- a/hacking/aws_config/testing_policies/network-policy.json
+++ b/hacking/aws_config/testing_policies/network-policy.json
@ -6,9 +6,11 @@
            "Effect": "Allow",
            "Action": [
                "route53:CreateHostedZone",
+                "route53:ChangeResourceRecordSets",
                "route53:DeleteHostedZone",
                "route53:GetHostedZone",
                "route53:ListHostedZones",
+                "route53:ListResourceRecordSets",
                "route53:UpdateHostedZoneComment"
            ],
            "Resource": "*"
--- a/test/integration/targets/route53/tasks/main.yml
+++ b/test/integration/targets/route53/tasks/main.yml
@ -11,7 +11,7 @@
    group/aws:
      aws_access_key: "{{ aws_access_key }}"
      aws_secret_key: "{{ aws_secret_key }}"
-      security_token: "{{ security_token }}"
+      security_token: "{{ security_token | default(omit) }}"
      region: "{{ aws_region }}"
    route53:
      region: null