Closed zipengw27 closed 1 year ago
The customers are not required to update this for their running TRE infra since deprecated policy can still be used for existing roles that are attached with it. However, once AmazonEC2RoleforSSM is officially deprecated, customers need to install new TRE with this commit.
Description of changes:
This PR replaces soon deprecated
AmazonEC2RoleforSSM
managed policy withAmazonSSMManagedInstanceCore
andCloudWatchAgentServerPolicy
managed policies according to this AWS blog post.Testing:
Deployed with updated template. Verified
TerraformExecutionRole
is updated with the new policies. Tried the provision and terminate workflows with the new policies and everything runs fine.Issue:
Fixes #25