#941 and #943 are updating the AWS Batch CE policy, this PR is updating the AWS Cloud CE policy
I agree with the comments from Stefano, many changes are just aestethic, they aren't limiting or improving the policy.
In #941 and #943 I added a copy-pasteable policy with wide-open permissions for AWS Batch CEs, and I then commented each section in it to reduce the scope of each section according to the needs of each customer. I can replicate it for AWS Cloud CEs too.
I think we should mirror these changes (with the caveat of the TOWER_FORGE_PREFIX env var) in the Enterprise docs too.
Originally posted by @bebosudo in #839 (review)