Skip to content

Commit ac60949

Browse files
committed
VED-500: remove unused permissions
1 parent b3a937a commit ac60949

File tree

1 file changed

+1
-65
lines changed

1 file changed

+1
-65
lines changed

terraform/csoc_cloudwatch.tf

Lines changed: 1 addition & 65 deletions
Original file line numberDiff line numberDiff line change
@@ -31,68 +31,4 @@ resource "aws_iam_role_policy" "eventbridge_forwarder_policy" {
3131
]
3232
}]
3333
})
34-
}
35-
36-
37-
38-
39-
40-
41-
42-
43-
44-
45-
46-
47-
48-
49-
50-
51-
52-
53-
54-
55-
56-
57-
58-
59-
60-
61-
62-
resource "aws_iam_role" "dynamo_s3_access_role" {
63-
name = "${local.short_prefix}-dynamo-s3-access-role"
64-
assume_role_policy = jsonencode({
65-
Version : "2012-10-17",
66-
Statement : [
67-
{
68-
Effect : "Allow",
69-
Principal : {
70-
AWS : "arn:aws:iam::${var.dspp_core_account_id}:root"
71-
},
72-
Action : "sts:AssumeRole"
73-
}
74-
]
75-
})
76-
}
77-
78-
resource "aws_iam_role_policy" "dynamo_s3_access_policy" {
79-
name = "${local.short_prefix}-dynamo_s3_access-policy"
80-
role = aws_iam_role.dynamo_s3_access_role.id
81-
policy = jsonencode({
82-
Version = "2012-10-17",
83-
Statement = [
84-
{
85-
Effect = "Allow",
86-
Action = [
87-
"dynamodb:BatchGetItem",
88-
"dynamodb:GetItem",
89-
"dynamodb:Query"
90-
],
91-
Resource = [
92-
aws_dynamodb_table.delta-dynamodb-table.arn,
93-
"${aws_dynamodb_table.delta-dynamodb-table.arn}/index/*"
94-
]
95-
}
96-
]
97-
})
98-
}
34+
}

0 commit comments

Comments
 (0)