Merge pull request #580 from rust-lang/fix-restrict-playground-permis…

…sions fix: restrict playground permissions
rust-lang · Sep 26, 2024 · c8b6161 · c8b6161
2 parents 7244dc7 + 59882de
commit c8b6161
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/terraform/team-members-access/infra-deploy-playground.tf b/terraform/team-members-access/infra-deploy-playground.tf
@@ -52,6 +52,11 @@ resource "aws_iam_group_policy" "infra_deploy_playground" {
         "Resource" : [
           "arn:aws:ec2:*:*:instance/*",
         ],
+        "Condition" : {
+          "StringEquals" : {
+            "ec2:ResourceTag/Service" : "playground"
+          }
+        }
       }
     ]
   })