remove cloudfront:CreateVpcOrigin from wildcardOnlyActions

phuhung273 · phuhung273 · commit 8a775957ee72 · 2025-06-06T16:08:47.000Z
diff --git a/packages/aws-cdk-lib/aws-cloudfront/lib/private/utils.ts b/packages/aws-cdk-lib/aws-cloudfront/lib/private/utils.ts
@@ -12,7 +12,6 @@ const wildcardOnlyActions = [
   'cloudfront:CreateOriginAccessControl',
   'cloudfront:CreatePublicKey',
   'cloudfront:CreateSavingsPlan',
-  'cloudfront:CreateVpcOrigin',
   'cloudfront:DeleteKeyGroup',
   'cloudfront:DeleteMonitoringSubscription',
   'cloudfront:DeletePublicKey',
diff --git a/packages/aws-cdk-lib/aws-cloudfront/test/distribution.test.ts b/packages/aws-cdk-lib/aws-cloudfront/test/distribution.test.ts
@@ -1124,7 +1124,6 @@ test('grants custom actions', () => {
     'cloudfront:CreateOriginAccessControl',
     'cloudfront:CreatePublicKey',
     'cloudfront:CreateSavingsPlan',
-    'cloudfront:CreateVpcOrigin',
     'cloudfront:DeleteKeyGroup',
     'cloudfront:DeleteMonitoringSubscription',
     'cloudfront:DeletePublicKey',
@@ -1181,7 +1180,6 @@ test('grants custom actions', () => {
             'cloudfront:CreateOriginAccessControl',
             'cloudfront:CreatePublicKey',
             'cloudfront:CreateSavingsPlan',
-            'cloudfront:CreateVpcOrigin',
             'cloudfront:DeleteKeyGroup',
             'cloudfront:DeleteMonitoringSubscription',
             'cloudfront:DeletePublicKey',
