Skip to content

Commit 51c4ac8

Browse files
Merge pull request #4 from cookielab/fix/remove-source-arn-condition
fix: remove aws:SourceArn condition from billing bucket policy
2 parents 704ae58 + 2092c05 commit 51c4ac8

File tree

1 file changed

+0
-12
lines changed

1 file changed

+0
-12
lines changed

modules/source/main.tf

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -40,12 +40,6 @@ data "aws_iam_policy_document" "bucket_policy" {
4040

4141
resources = [local.bucket_arn]
4242

43-
condition {
44-
test = "StringLike"
45-
variable = "aws:SourceArn"
46-
values = [aws_cur_report_definition.this[0].arn]
47-
}
48-
4943
condition {
5044
test = "StringEquals"
5145
variable = "aws:SourceAccount"
@@ -70,12 +64,6 @@ data "aws_iam_policy_document" "bucket_policy" {
7064

7165
resources = ["${local.bucket_arn}/*"]
7266

73-
condition {
74-
test = "StringLike"
75-
variable = "aws:SourceArn"
76-
values = [aws_cur_report_definition.this[0].arn]
77-
}
78-
7967
condition {
8068
test = "StringEquals"
8169
variable = "aws:SourceAccount"

0 commit comments

Comments
 (0)