Merge branch 'master' of https://github.com/Sage-Bionetworks-IT/organ…

…izations-infra into IT-3317-dev-only
Sage-Bionetworks-IT · Jan 25, 2024 · 4ccb222 · 4ccb222
2 parents 0dfc927 + 5420aec
commit 4ccb222
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -4,10 +4,12 @@ on:
   pull_request:
     branches: ['*']
   push:
-    branches: ['*']
+    branches: ['master']
 
 # Ensures that only one deploy task per branch/environment will run at a time.
-concurrency: ci-${{ github.ref }}
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
 
 jobs:
   pre-commit:

diff --git a/org-formation/700-aws-sso/_tasks.yaml b/org-formation/700-aws-sso/_tasks.yaml
@@ -499,6 +499,7 @@ SsoS3Viewer:
     permissionSetName: 'S3Viewer'
     managedPolicies:
       - 'arn:aws:iam::aws:policy/job-function/ViewOnlyAccess'
+      - 'arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess'
       - 'arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess'
     sessionDuration: 'PT12H'
     masterAccountId: !Ref MasterAccount