ministryofjustice / bootstrap-cfn

53%

master: 58%

LAST BUILD ON BRANCH fix/s3-perms

branch: fix/s3-perms

CHANGE BRANCH

x

Reset

• fix/s3-perms
• 0.6.1
• abort_on_rollback
• add-default-region-for-boto3
• add-dry-run-to-maintenance
• add-elb-dns-task
• add-elb-tasks
• add-list-elb-dns
• add-tests
• add_acm_support
• add_cycle_instances_task
• add_dependson_requirements
• add_docstrings_to_fab_tasks
• add_dynamic_vpc_addressing
• add_elastic_ip_pool
• add_elasticache_redis_only
• add_get_basic_config
• add_get_stack_list
• add_keyname_to_fab_parameters
• add_name_tag_to_instances
• add_random_number_generator_to_rds
• add_simple_countdown_for_long_waits
• add_stack_check
• add_upgrade_to_cloud_init
• add_version_tag
• add_vpc_peering
• add_vpc_peering_advanced
• add_windows_support
• alb-support-v1
• allow-different-aws-for-route53
• automatic_resource_naming
• automatic_resource_naming_elb
• automatic_resource_naming_elb_simple
• automatic_resource_naming_rds
• bug/storage-type
• build_from_snapshot
• cfn_create_fail_cleanup
• cfn_delete-hooks
• check_asg_health_check_is_done
• ci-test
• consistent-imports
• create_multiple_stacks
• custom-config
• custom-vpc
• custom_elb_sg_tests
• default_rds_encryption_to_true
• delete-cert-cfn-delete
• delete-dangling-ssl-certs
• deletion-prompt
• deprecated_config_env_tag
• disable-pp-cfn
• disable_encryption_on_staging_rds
• dns-delete
• dnstag_fix
• dockerfile_for_local_execution
• dont_set_name_tag_if_manually_set
• drop_awsencode
• elasticsearch
• elb-iam-role
• enable_cert_updates
• feature-maintenance-mode
• feature/autoscale-tags
• feature/elb-healthcheck
• feature/elb-sg
• feature/extend-template
• feature/salt-pillar
• feature/sg-refs
• feature_enable_ec2_volume_types
• feature_enable_ec2_volume_types_updated
• feature_specify_policies_for_elbs
• fils-dependency-implementation
• fix-elb-policy
• fix-error-message
• fix-exception-keyerror
• fix-exit-maintenance-boto3
• fix-pypi-dist
• fix-readd-loadbalancer-permissions
• fix-set-active-stack-on-internal-lb
• fix/custom_s3_policy
• fix/rsync-task
• fix_acm_alternative_names_tests
• fix_autoscale_paging
• fix_certificate_deletion
• fix_certificate_updating_on_live_elbs
• fix_cfn_delete_on_wsproxy
• fix_crossaccount_iam
• fix_data_files_build
• fix_deprecated_delete_certificate_force
• fix_dont_pass_bulk_text_as_max_retries_value
• fix_get_resource_type_for_back_compatibility
• fix_internal_elb
• fix_missing_vpc_import
• fix_sudo_hostname_error
• foosave
• get-elb-helpers
• get_stack_list
• handle-config-file-not-found
• hostname-template
• iam-cross-account
• issue-56-elb-no-longer-optional
• issue/56-elb-no-longer-optional
• issue/block-devices-mandatory
• l-
• lifecycle-non-static-buckets
• make-update-record-backwards-compatible
• make_update_certs_more_tolerant
• management_subnets
• markup_fix
• master
• mssql-sg
• multiple_s3_buckets
• multiple_stacks_unittest
• new-ami
• new_version
• override_ami
• pep8-on-hunks
• permit-tagging-from-instances
• rds/storage_encrypted
• read-replica
• readme-fixup
• refactor-fab_tasks
• release_0.8.0
• release_0.8.2
• remove_fallback_on_missing_route53_stack_name
• remove_subnet_hardwiring
• rename-moj-salt-script
• rename_s3_bucket_output_to_be_consistent
• restore_previous_get_resource_type_for_back_compatibility
• salt_doc
• sane_defaults
• self-referential-sg
• separate_out_get_set_stack_name
• set_boto3_session_to_use_aws_profile
• set_rds_defaults
• show_events
• side_multiple_tasks
• sql-server-db-name
• ssl-acm-fix-1
• stack-name-tagging
• support_alternative_domain_name_validation_options
• tag-product-name
• tag_all_stack_resources
• test_coverage
• test_flag
• travis-test
• troposphere
• troposphere2
• unblock-tail-on-delete
• unblock-tests-remove-pdb
• unbreak-update-certs
• update-config
• update-readme-format
• update_default_rds_version
• update_deployarn_if_active_stack_changes
• update_enter_maintenance_update_a_dns_record
• update_flake8_import_order_version
• update_get_stack_list_algorithm
• update_ubuntu_ami_to_20160509
• upgrade_to_boto3_wip
• use-boto-config
• userdata-change
• v0.10.0
• v0.11.0
• v0.11.1
• v0.2.0
• v0.2.1
• v0.2.2
• v0.3.1
• v0.3.3
• v0.4.0
• v0.4.1
• v0.5.0
• v0.5.1
• v0.5.10
• v0.5.11
• v0.5.2
• v0.5.3
• v0.5.4
• v0.5.5
• v0.5.6
• v0.5.7
• v0.5.8
• v0.5.9
• v0.6.0
• v0.6.2
• v0.6.3
• v0.7.0
• v0.7.1
• v0.7.2
• v0.7.3
• v0.7.4
• v0.7.5
• v0.7.6
• v0.7.7
• v0.8.2
• v0.8.3
• v0.8.4
• v0.8.5
• v0.9.0
• v1.3.0
• v1.3.0rc1
• v1.4.0
• v1.4.1
• v1.5.3

Build # 594

Build Type

push

travis-ci

Committed by mattmb

Commit Message

Make S3 permissions tighter.

Give everyone s3:GetObject but otherwise leave access to the bucket
locked down. If you use template deploy as directed the jenkins box will
also get write permissions. Otherwise you can still overwrite the policy
by including custom json.

Run Details

399 of 748 relevant lines covered (53.34%)

0.53 hits per line