removed ec2 permissions per PR feedback

juliareynolds-nava · juliareynolds-nava · commit b85961823575 · 2026-03-10T11:21:54.000-06:00
diff --git a/ops/services/20-bene-prefs/main.tf b/ops/services/20-bene-prefs/main.tf
@@ -75,10 +75,6 @@ data "aws_iam_policy_document" "default_function" {
       "logs:PutLogEvents",
       "logs:CreateLogStream",
       "logs:CreateLogGroup",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribeAccountAttributes",
-      "ec2:DeleteNetworkInterface",
-      "ec2:CreateNetworkInterface",
     ]
     resources = ["*"] #TODO: Consider splitting into discrete statements/policy allowances 
   }

Original file line number	Diff line number	Diff line change
`@@ -75,10 +75,6 @@ data "aws_iam_policy_document" "default_function" {`
`75`	`75`	`"logs:PutLogEvents",`
`76`	`76`	`"logs:CreateLogStream",`
`77`	`77`	`"logs:CreateLogGroup",`
`78`		`- "ec2:DescribeNetworkInterfaces",`
`79`		`- "ec2:DescribeAccountAttributes",`
`80`		`- "ec2:DeleteNetworkInterface",`
`81`		`- "ec2:CreateNetworkInterface",`
`82`	`78`	`]`
`83`	`79`	`resources = ["*"] #TODO: Consider splitting into discrete statements/policy allowances`
`84`	`80`	`}`