Fix ReadOnlyAccess arn in different aws partitions

ywyt738 · web-flow · commit 3ec5a29f14cf · 2021-05-08T11:49:59.000+08:00
diff --git a/cloudaux/aws/sts.py b/cloudaux/aws/sts.py
@@ -142,7 +142,7 @@ def boto3_cached_conn(service, service_type='client', future_expiration_minutes=
         if read_only:
             assume_role_kwargs['PolicyArns'] = [
                 {
-                    'arn': 'arn:aws:iam::aws:policy/ReadOnlyAccess'
+                    'arn': 'arn:{partition}:iam::aws:policy/ReadOnlyAccess'.format(partition=arn_partition)
                 },
             ]
 

Original file line number	Diff line number	Diff line change
`@@ -142,7 +142,7 @@ def boto3_cached_conn(service, service_type='client', future_expiration_minutes=`
`142`	`142`	`if read_only:`
`143`	`143`	`assume_role_kwargs['PolicyArns'] = [`
`144`	`144`	`{`
`145`		`- 'arn': 'arn:aws:iam::aws:policy/ReadOnlyAccess'`
	`145`	`+ 'arn': 'arn:{partition}:iam::aws:policy/ReadOnlyAccess'.format(partition=arn_partition)`
`146`	`146`	`},`
`147`	`147`	`]`
`148`	`148`