remove DENY of s3 actions blocking aws-dubbd loki (#32)

defenseunicorns · Jul 18, 2023 · 20d074d · 20d074d
1 parent b91de54
commit 20d074d
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/iam.tf b/iam.tf
@@ -436,9 +436,7 @@ resource "aws_iam_policy" "terraform_policy" {
         },
         {
             "Action": [
-                "aws-portal:*Billing",
-                "s3:PutBucketPublicAccessBlock",
-                "s3:PutAccountPublicAccessBlock"
+                "aws-portal:*Billing"
             ],
             "Resource": "*",
             "Effect": "Deny"