Remove S3 from base stack, must be managed externally to game-ci

dist/cloud-formations/base-setup.yml

@@ -7,10 +7,6 @@ Parameters:
     Type: String
     Default: development
     Description: "Your deployment environment: DEV, QA , PROD"
-  Storage:
-    Type: String
-    Default: game-ci-storage
-    Description: "Your s3 storage bucket"
   Version:
     Type: String
     Description: "hash of template"
@@ -238,10 +234,6 @@ Resources:
             Statement:
             - Effect: Allow
               Action:
-                # Allow upload to S3
-                - 's3:GetObject'
-                - 's3:GetObjectVersion'
-                - 's3:PutObject'
 
                 # Allow the use of secret manager
                 - 'secretsmanager:GetSecretValue'
@@ -355,12 +347,6 @@ Resources:
       SecurityGroups:
       - !Ref EFSServerSecurityGroup
 
-  S3Bucket:
-    Type: 'AWS::S3::Bucket'
-    DeletionPolicy: Retain
-    Properties:
-      BucketName: !Ref Storage
-
 
 
 

dist/cloud-formations/task-def-formation.yml

@@ -47,7 +47,7 @@ Parameters:
     Default: ''
     Description: >-
       (Optional) An IAM role to give the service's containers if the code within
-      needs to access other AWS resources like S3 buckets, DynamoDB tables, etc
+      needs to access other AWS resources
   EFSMountDirectory:
     Type: String
     Default: '/efsdata'
@@ -98,7 +98,7 @@ Resources:
     Metadata:
       'AWS::CloudFormation::Designer':
         id: c6f18447-b879-4696-8873-f981b2cedd2b
-  
+
   # template secrets p2 - secret
 
   TaskDefinition:

src/model/cloud-runner/aws/cloud-formations/base-setup.yml

@@ -7,10 +7,6 @@ Parameters:
     Type: String
     Default: development
     Description: 'Your deployment environment: DEV, QA , PROD'
-  Storage:
-    Type: String
-    Default: game-ci-storage
-    Description: 'Your s3 storage bucket'
   Version:
     Type: String
     Description: 'hash of template'
@@ -225,11 +221,6 @@ Resources:
             Statement:
               - Effect: Allow
                 Action:
-                  # Allow upload to S3
-                  - 's3:GetObject'
-                  - 's3:GetObjectVersion'
-                  - 's3:PutObject'
-
                   # Allow the use of secret manager
                   - 'secretsmanager:GetSecretValue'
                   - 'kms:Decrypt'
@@ -340,12 +331,6 @@ Resources:
       SecurityGroups:
         - !Ref EFSServerSecurityGroup
 
-  S3Bucket:
-    Type: 'AWS::S3::Bucket'
-    DeletionPolicy: Retain
-    Properties:
-      BucketName: !Ref Storage
-
 Outputs:
   EfsFileStorageId:
     Description: 'The connection endpoint for the database.'