Add ec2:DescribeNetworkInterfaces and fix createOnlyProperties typo (#22)

* Fix BucketAccessRoleArn name typo

* Add ec2:DescribeNetworkInterfaces permissions to LocationFSx resource role

* Remove nested property BucketAccessRoleArn from createOnlyProperties

Co-authored-by: Josh Sennett <[email protected]>

Author: Josh Sennett

aws-datasync-locationfsxwindows/aws-datasync-locationfsxwindows.json

@@ -122,6 +122,7 @@
         "datasync:DescribeLocationFsxWindows",
         "datasync:ListTagsForResource",
         "fsx:DescribeFileSystems",
+        "ec2:DescribeNetworkInterfaces",
         "ec2:DescribeSubnets",
         "ec2:DescribeSecurityGroups"
       ]

aws-datasync-locationfsxwindows/resource-role.yaml

@@ -30,6 +30,7 @@ Resources:
                 - "datasync:ListTagsForResource"
                 - "datasync:TagResource"
                 - "datasync:UntagResource"
+                - "ec2:DescribeNetworkInterfaces"
                 - "ec2:DescribeSecurityGroups"
                 - "ec2:DescribeSubnets"
                 - "fsx:DescribeFileSystems"

aws-datasync-locations3/aws-datasync-locations3.json

@@ -110,8 +110,6 @@
   "createOnlyProperties": [
     "/properties/S3Config",
     "/properties/S3BucketArn",
-    "/properties/BucketAccessRoleName",
-    "/properties/BucketName",
     "/properties/Subdirectory",
     "/properties/S3StorageClass"
   ],