remove the extra service assume role. not necessary.

soisyourface · soisyourface · commit 3a21594d00b9 · 2024-12-10T12:25:29.000-07:00
diff --git a/iam_pipes.tf b/iam_pipes.tf
@@ -339,16 +339,6 @@ data "aws_iam_policy_document" "assume_role_pipe" {
       values   = ["arn:aws:pipes:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:pipe/${each.value.Name}"]
     }
   }
-
-  statement {
-    effect  = "Allow"
-    actions = ["sts:AssumeRole"]
-
-    principals {
-      type        = "Service"
-      identifiers = ["kinesis.${data.aws_partition.current.dns_suffix}"]
-    }
-  }
 }
 
 resource "aws_iam_role" "eventbridge_pipe" {

Original file line number	Diff line number	Diff line change
`@@ -339,16 +339,6 @@ data "aws_iam_policy_document" "assume_role_pipe" {`
`339`	`339`	`values = ["arn:aws:pipes:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:pipe/${each.value.Name}"]`
`340`	`340`	`}`
`341`	`341`	`}`
`342`		`-`
`343`		`- statement {`
`344`		`- effect = "Allow"`
`345`		`- actions = ["sts:AssumeRole"]`
`346`		`-`
`347`		`- principals {`
`348`		`- type = "Service"`
`349`		`- identifiers = ["kinesis.${data.aws_partition.current.dns_suffix}"]`
`350`		`- }`
`351`		`- }`
`352`	`342`	`}`
`353`	`343`
`354`	`344`	`resource "aws_iam_role" "eventbridge_pipe" {`