Remove the build-image default cleanup role trust policy condition (#6926)

hehe7318 · web-flow · commit e2d21fc22b73 · 2025-07-31T11:18:18.000-07:00
diff --git a/cli/src/pcluster/imagebuilder_utils.py b/cli/src/pcluster/imagebuilder_utils.py
@@ -192,11 +192,6 @@ def ensure_default_build_image_stack_cleanup_role(
                 "Effect": "Allow",
                 "Principal": {"Service": "lambda.amazonaws.com"},
                 "Action": "sts:AssumeRole",
-                "Condition": {
-                    "ArnLike": {
-                        "aws:SourceArn": f"arn:{partition}:lambda:*:{account_id}:function:ParallelClusterImage-*"
-                    }
-                },
             }
         ],
     }

Original file line number	Diff line number	Diff line change
`@@ -192,11 +192,6 @@ def ensure_default_build_image_stack_cleanup_role(`
`192`	`192`	`"Effect": "Allow",`
`193`	`193`	`"Principal": {"Service": "lambda.amazonaws.com"},`
`194`	`194`	`"Action": "sts:AssumeRole",`
`195`		`- "Condition": {`
`196`		`- "ArnLike": {`
`197`		`- "aws:SourceArn": f"arn:{partition}:lambda::{account_id}:function:ParallelClusterImage-"`
`198`		`- }`
`199`		`- },`
`200`	`195`	`}`
`201`	`196`	`],`
`202`	`197`	`}`