CCM-9234: add ec2 revoke permission to Github_Deploy role (#422)

bhansell1 · web-flow · commit 33fdc97ff83b · 2025-04-16T10:46:31.000Z
diff --git a/infrastructure/terraform/components/acct/iam_policy_github_deploy_overload.tf b/infrastructure/terraform/components/acct/iam_policy_github_deploy_overload.tf
@@ -48,6 +48,7 @@ data "aws_iam_policy_document" "github_deploy" {
       "ec2:ModifyVpc*",
       "ec2:ReleaseAddress",
       "ec2:Replace*",
+      "ec2:Revoke*",
     ]
     resources = ["*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -48,6 +48,7 @@ data "aws_iam_policy_document" "github_deploy" {`
`48`	`48`	`"ec2:ModifyVpc*",`
`49`	`49`	`"ec2:ReleaseAddress",`
`50`	`50`	`"ec2:Replace*",`
	`51`	`+ "ec2:Revoke*",`
`51`	`52`	`]`
`52`	`53`	`resources = ["*"]`
`53`	`54`	`}`