more restrictive permissions

Author: Bryan Kendall

ansible/swarm-cloudwatch-reporter.yml

@@ -10,15 +10,15 @@
       state: directory
       owner: ubuntu
       group: ubuntu
-      mode: 0775
+      mode: 0500
 
   - name: put script in place
     template:
       src: get-info.js
       dest: /opt/runnable/get-info.js
       owner: ubuntu
       group: ubuntu
-      mode: 0444
+      mode: 0400
 
   - name: run container
     when: test_run is defined