From 20d074d06f41713410c05a0d7b7991123372803f Mon Sep 17 00:00:00 2001
From: brianrexrode <90282218+brianrexrode@users.noreply.github.com>
Date: Tue, 18 Jul 2023 14:40:31 -0600
Subject: [PATCH] remove DENY of s3 actions blocking aws-dubbd loki (#32)

---
 iam.tf | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/iam.tf b/iam.tf
index 3957cd1..766e100 100644
--- a/iam.tf
+++ b/iam.tf
@@ -436,9 +436,7 @@ resource "aws_iam_policy" "terraform_policy" {
         },
         {
             "Action": [
-                "aws-portal:*Billing",
-                "s3:PutBucketPublicAccessBlock",
-                "s3:PutAccountPublicAccessBlock"
+                "aws-portal:*Billing"
             ],
             "Resource": "*",
             "Effect": "Deny"