Skip to content

Commit 162a101

Browse files
committed
[Infrastructure] Specify PermissionsBoundaryPolicy and IAMRoleAndPolicyPrefix in PCAPI only if not empty.
Also fix the parameter used in PCAPI: PermissionsBoundaryPolicyPCAPI rather than PermissionsBoundaryPolicy.
1 parent 0d0c3dc commit 162a101

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

infrastructure/parallelcluster-ui.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -142,6 +142,8 @@ Conditions:
142142
- !Equals ['5', !Select [ 1, !Split ['.', !Ref Version] ] ]
143143
InGovCloud: !Equals ['us-gov-west-1', !Ref "AWS::Region"]
144144
UsePermissionBoundary: !Not [!Equals [!Ref PermissionsBoundaryPolicy, '']]
145+
UsePermissionBoundaryPCAPI: !Not [!Equals [!Ref PermissionsBoundaryPolicyPCAPI, '']]
146+
UseIAMRoleAndPolicyPrefix: !Not [!Equals [!Ref IAMRoleAndPolicyPrefix, '']]
145147

146148
Mappings:
147149
ParallelClusterUI:
@@ -172,8 +174,8 @@ Resources:
172174
Type: AWS::CloudFormation::Stack
173175
Properties:
174176
Parameters:
175-
PermissionsBoundaryPolicy: !Ref PermissionsBoundaryPolicy
176-
IAMRoleAndPolicyPrefix: !Ref IAMRoleAndPolicyPrefix
177+
PermissionsBoundaryPolicy: !If [ UsePermissionBoundaryPCAPI, !Ref PermissionsBoundaryPolicyPCAPI, !Ref AWS::NoValue ]
178+
IAMRoleAndPolicyPrefix: !If [ UseIAMRoleAndPolicyPrefix, !Ref IAMRoleAndPolicyPrefix, !Ref AWS::NoValue ]
177179
ApiDefinitionS3Uri: !Sub s3://${AWS::Region}-aws-parallelcluster/parallelcluster/${Version}/api/ParallelCluster.openapi.yaml
178180
CreateApiUserRole: False
179181
EnableIamAdminAccess: True

0 commit comments

Comments
 (0)