Grant access to serverlessrepo.amazonaws.com [skip ci]

talenfisher · talenfisher · commit f3348c8b7d6b · 2020-11-10T14:10:45.000-06:00
diff --git a/cicd.template.yml b/cicd.template.yml
@@ -52,7 +52,8 @@ Resources:
             Action: s3:GetObject
             Resource:
               - !Sub arn:aws:s3:::${ArtifactStore}/templates/*
-            Principal: "*"
+            Principal:
+              Service: serverlessrepo.amazonaws.com
 
   BuildProject:
     Type: AWS::CodeBuild::Project
