SSPROD-63283 - agentless scan: remove unnecessary permission (#80)

jose-pablo-camacho · web-flow · commit ce3f251d5470 · 2025-11-26T17:35:26.000-06:00
diff --git a/modules/agentless-scan/main.tf b/modules/agentless-scan/main.tf
@@ -18,8 +18,6 @@ locals {
     # disks
     "compute.disks.list",
     "compute.disks.get",
-    # workload identity federation
-    "iam.serviceAccounts.getAccessToken",
   ]
   host_scan_permissions = [
     # general stuff

Original file line number	Diff line number	Diff line change
`@@ -18,8 +18,6 @@ locals {`
`18`	`18`	`# disks`
`19`	`19`	`"compute.disks.list",`
`20`	`20`	`"compute.disks.get",`
`21`		`- # workload identity federation`
`22`		`- "iam.serviceAccounts.getAccessToken",`
`23`	`21`	`]`
`24`	`22`	`host_scan_permissions = [`
`25`	`23`	`# general stuff`