Use s3 cp inside of sync for better security

aws-ia / cfn-ps-clickhouse-cluster

Apache License 2.0

10 stars 6 forks source link

Closed Luna-LHY closed 11 months ago

Luna-LHY commented 1 year ago

Updated ClickHouse installation script to use s3 cp instead of s3 sync. We don't want to sync everything from the bucket to the instance... Also updated IAM role to have more restricted access to S3 objects.
Fixed clickhouse-client installation in China region

Tested in China regions and stack deployment succeeded.

vsnyc commented 11 months ago

/do-e2e-tests

aws-ia-automator-prod[bot] commented 11 months ago

End to end test has been scheduled

aws-ia-automator-prod[bot] commented 11 months ago

e2e test in progress