Skip to content

Commit 1cb17de

Browse files
committed
Revert changes that granted the department read permission on the user upload database
1 parent 4425516 commit 1cb17de

File tree

1 file changed

+3
-11
lines changed

1 file changed

+3
-11
lines changed

terraform/core/05-departments.tf

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -155,7 +155,7 @@ module "department_data_and_insight" {
155155
user_uploads_bucket = module.user_uploads
156156
cloudtrail_bucket = module.cloudtrail_storage
157157
additional_glue_database_access = {
158-
read_only = ["data_and_insight_user_uploads_db"]
158+
read_only = []
159159
read_write = ["arcus_archive", "metastore"]
160160
}
161161
additional_s3_access = [
@@ -277,10 +277,6 @@ module "department_unrestricted" {
277277
mwaa_etl_scripts_bucket_arn = aws_s3_bucket.mwaa_etl_scripts_bucket.arn
278278
mwaa_key_arn = aws_kms_key.mwaa_key.arn
279279
user_uploads_bucket = module.user_uploads
280-
additional_glue_database_access = {
281-
read_only = ["unrestricted_user_uploads_db"]
282-
read_write = []
283-
}
284280
}
285281

286282
module "department_sandbox" {
@@ -432,10 +428,6 @@ module "department_environmental_services" {
432428
mwaa_etl_scripts_bucket_arn = aws_s3_bucket.mwaa_etl_scripts_bucket.arn
433429
mwaa_key_arn = aws_kms_key.mwaa_key.arn
434430
user_uploads_bucket = module.user_uploads
435-
additional_glue_database_access = {
436-
read_only = ["env_services_user_uploads_db"]
437-
read_write = []
438-
}
439431
}
440432

441433
module "department_housing" {
@@ -492,7 +484,7 @@ module "department_housing" {
492484
}
493485
]
494486
additional_glue_database_access = {
495-
read_only = ["housing_user_uploads_db"]
487+
read_only = []
496488
read_write = ["housing_service_requests_ieg4", "housing_nec_migration", "housing_nec_migration_outputs"]
497489
}
498490
}
@@ -668,7 +660,7 @@ module "department_children_family_services" {
668660
mwaa_key_arn = aws_kms_key.mwaa_key.arn
669661
user_uploads_bucket = module.user_uploads
670662
additional_glue_database_access = {
671-
read_only = ["child_edu_refined", "hackney_casemanagement_live", "hackney_synergy_live", "child_fam_services_user_uploads_db"]
663+
read_only = ["child_edu_refined", "hackney_casemanagement_live", "hackney_synergy_live"]
672664
read_write = []
673665
}
674666
}

0 commit comments

Comments
 (0)