Removed s3 delete permissions

robbailiff2 · robbailiff2 · commit 73ea8f147566 · 2025-08-28T15:57:04.000+01:00
diff --git a/infrastructure/stacks/api-layer/iam_policies.tf b/infrastructure/stacks/api-layer/iam_policies.tf
@@ -489,7 +489,6 @@ data "aws_iam_policy_document" "external_s3_read_move_policy_doc" {
       "s3:GetObjectVersion",
       "s3:GetObjectTagging",
       "s3:PutObjectTagging",
-      "s3:DeleteObject",
       "s3:PutObject"
     ]
     resources = [

Original file line number	Diff line number	Diff line change
`@@ -489,7 +489,6 @@ data "aws_iam_policy_document" "external_s3_read_move_policy_doc" {`
`489`	`489`	`"s3:GetObjectVersion",`
`490`	`490`	`"s3:GetObjectTagging",`
`491`	`491`	`"s3:PutObjectTagging",`
`492`		`- "s3:DeleteObject",`
`493`	`492`	`"s3:PutObject"`
`494`	`493`	`]`
`495`	`494`	`resources = [`