Skip to content

Commit 5312d5b

Browse files
committed
VED-726: Apply consistent permissions for the DPS account in all environments. (#740)
1 parent 02fade0 commit 5312d5b

File tree

1 file changed

+1
-6
lines changed

1 file changed

+1
-6
lines changed

terraform/dps_role_creation.tf

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,14 +22,9 @@ resource "aws_iam_role_policy" "dynamo_s3_access_policy" {
2222
Statement = [
2323
{
2424
Effect = "Allow",
25-
Action = var.environment == "prod" ? [
26-
"dynamodb:GetItem",
27-
"dynamodb:Query"
28-
] : [
25+
Action = [
2926
"dynamodb:BatchGetItem",
3027
"dynamodb:GetItem",
31-
"dynamodb:PutItem",
32-
"dynamodb:UpdateItem",
3328
"dynamodb:Query"
3429
],
3530
Resource = [

0 commit comments

Comments
 (0)