From 04be48a8cd1bade97a8d2475e8f7c59149aea441 Mon Sep 17 00:00:00 2001 From: Timothy Clarke Date: Fri, 29 Jan 2021 13:01:11 +0000 Subject: [PATCH] Corrected externalPolicy AWS IAM resource ID's were in an incorrect format. --- docs/iam_roles.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/iam_roles.md b/docs/iam_roles.md index db173f0cd6..4d977796bb 100644 --- a/docs/iam_roles.md +++ b/docs/iam_roles.md @@ -81,11 +81,11 @@ Policy Overrides are specified by their ARN on AWS and are grouped by their role spec: externalPolicies: node: - - aws:arn:iam:123456789000:policy:test-policy + - arn:aws:iam::123456789000:policy/test-policy master: - - aws:arn:iam:123456789000:policy:test-policy + - arn:aws:iam::123456789000:policy/test-policy bastion: - - aws:arn:iam:123456789000:policy:test-policy + - arn:aws:iam::123456789000:policy/test-policy ``` External Policy attachments are treated declaritively. Any policies declared will be attached to the role, any policies not specified will be detached _after_ new policies are attached. This does not replace or affect built in kOps policies in any way.