Only Allow ServerlessRepo Access to Artifact Store

talenfisher · talenfisher · commit 61f09f180f18 · 2021-02-10T10:46:19.000-06:00
diff --git a/cicd.template.yml b/cicd.template.yml
@@ -52,7 +52,8 @@ Resources:
             Action: s3:GetObject
             Resource:
               - !Sub arn:aws:s3:::${ArtifactStore}/templates/*
-            Principal: "*"
+            Principal:
+              Service: serverlessrepo.amazonaws.com
 
   BuildProject:
     Type: AWS::CodeBuild::Project
