Use s3 cp inside of sync for better security

aws-ia / cfn-ps-clickhouse-cluster

Apache License 2.0

10 stars 6 forks source link

Closed Luna-LHY closed 9 months ago

Luna-LHY commented 10 months ago

Updated ClickHouse installation script to use s3 cp instead of s3 sync. We don't want to sync everything from the bucket to the instance... Also updated IAM role to have more restricted access to S3 objects.
Fixed clickhouse-client installation in China region

Tested in China regions and stack deployment succeeded.

vsnyc commented 9 months ago

/do-e2e-tests

aws-ia-automator-prod[bot] commented 9 months ago

End to end test has been scheduled

aws-ia-automator-prod[bot] commented 9 months ago

e2e test in progress