limit termination to only the instance itself

npalm · npalm · commit 266fcbdb5a3a · 2021-12-10T17:52:29.000+01:00
diff --git a/modules/runners/policies/instance-ec2.json b/modules/runners/policies/instance-ec2.json
@@ -7,7 +7,7 @@
       "Resource": "*",
       "Condition": {
         "StringEquals": {
-          "ec2:ResourceTag/Application": "github-action-runner"
+          "aws:ARN": "$${ec2:SourceInstanceARN}"
         }
       }
     }

Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@`
`7`	`7`	`"Resource": "*",`
`8`	`8`	`"Condition": {`
`9`	`9`	`"StringEquals": {`
`10`		`- "ec2:ResourceTag/Application": "github-action-runner"`
	`10`	`+ "aws:ARN": "$${ec2:SourceInstanceARN}"`
`11`	`11`	`}`
`12`	`12`	`}`
`13`	`13`	`}`