DS-571 updated Jenkins role

nhsd-exeter · Dec 19, 2023 · 24a5738 · 24a5738
1 parent e24f1f3
commit 24a5738
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/build/automation/lib/aws/aws-ecr-create-repository-policy.json b/build/automation/lib/aws/aws-ecr-create-repository-policy.json
@@ -44,12 +44,15 @@
       "Effect": "Deny",
       "NotPrincipal": {
         "AWS": [
-          "arn:aws:iam::AWS_ACCOUNT_ID_MGMT_TO_REPLACE:role/jenkins_assume_role",
-          "arn:aws:sts::AWS_ACCOUNT_ID_MGMT_TO_REPLACE:assumed-role/jenkins_assume_role/jenkins",
+          "arn:aws:iam::AWS_ACCOUNT_ID_MGMT_TO_REPLACE:role/uec-core-dos-jenkins-assume-role",
+          "arn:aws:sts::AWS_ACCOUNT_ID_MGMT_TO_REPLACE:assumed-role/uec-core-dos-jenkins-assume-role/jenkins",
           "arn:aws:iam::AWS_ACCOUNT_ID_MGMT_TO_REPLACE:root"
         ]
       },
-      "Action": ["ecr:BatchDeleteImage", "ecr:DeleteRepository"]
+      "Action": [
+        "ecr:BatchDeleteImage",
+        "ecr:DeleteRepository"
+      ]
     }
   ]
 }
diff --git a/build/automation/var/platform-texas/platform-texas-v1.mk b/build/automation/var/platform-texas/platform-texas-v1.mk
@@ -4,7 +4,7 @@ AWS_ECR = $(or $(AWS_ACCOUNT_ID_MGMT), 000000000000).dkr.ecr.$(AWS_DEFAULT_REGIO
 AWS_REGION = eu-west-2
 AWS_DEFAULT_REGION = $(AWS_REGION)
 AWS_ALTERNATIVE_REGION = eu-west-1
-AWS_ROLE_PIPELINE = jenkins_assume_role
+AWS_ROLE_PIPELINE = uec-core-dos-jenkins-assume-role
 AWS_ROLE_SESSION = jenkins
 AWS_ROLE = $(if $(HUDSON_URL),$(AWS_ROLE_PIPELINE),Developer)
 AWS_ALB_SSL_TLS_POLICY = ELBSecurityPolicy-TLS-1-2-2017-01