chore[deploy]: 권한 변경

DooHyoJeong · DooHyoJeong · commit 2968b00b4bdd · 2025-09-25T01:07:47.000+09:00
diff --git a/.github/workflows/CI-CD_Pipeline.yml b/.github/workflows/CI-CD_Pipeline.yml
@@ -218,7 +218,7 @@ jobs:
           aws-region: ${{ secrets.AWS_REGION }}
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          instance-ids: "i-094fd5f8988b7330b"
+          instance-ids: "i-084a4704f4e017cc4"
           working-directory: /
           comment: Deploy
           command: |
diff --git a/infra/main.tf b/infra/main.tf
@@ -171,7 +171,7 @@ resource "aws_iam_role_policy_attachment" "s3_full_access" {
 # EC2 역할에 AmazonEC2RoleforSSM 정책을 부착
 resource "aws_iam_role_policy_attachment" "ec2_ssm" {
   role       = aws_iam_role.ec2_role_1.name
-  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM"
+  policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
 }
 
 # IAM 인스턴스 프로파일 생성

Original file line number	Diff line number	Diff line change
`@@ -171,7 +171,7 @@ resource "aws_iam_role_policy_attachment" "s3_full_access" {`
`171`	`171`	`# EC2 역할에 AmazonEC2RoleforSSM 정책을 부착`
`172`	`172`	`resource "aws_iam_role_policy_attachment" "ec2_ssm" {`
`173`	`173`	`role = aws_iam_role.ec2_role_1.name`
`174`		`- policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforSSM"`
	`174`	`+ policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"`
`175`	`175`	`}`
`176`	`176`
`177`	`177`	`# IAM 인스턴스 프로파일 생성`