Skip to content

Commit fa64ba2

Browse files
remove nonused policy
1 parent 50f2b22 commit fa64ba2

File tree

1 file changed

+0
-20
lines changed

1 file changed

+0
-20
lines changed

iam-ecs-task.tf

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -69,26 +69,6 @@ resource "aws_iam_role_policy" "ssm_policy" {
6969
EOF
7070
}
7171

72-
resource "aws_iam_role_policy" "s3_policy" {
73-
name = "ecs-s3-policy"
74-
role = aws_iam_role.ecs_task.name
75-
76-
policy = <<EOF
77-
{
78-
"Version": "2012-10-17",
79-
"Statement": [
80-
{
81-
"Action": [
82-
"s3:GetObject"
83-
],
84-
"Effect": "Allow",
85-
"Resource": ["arn:aws:s3:::prod-${data.aws_region.current.name}-starport-layer-bucket/*"]
86-
}
87-
]
88-
}
89-
EOF
90-
}
91-
9272
resource "aws_iam_role_policy_attachment" "extra_task_policies_arn" {
9373
for_each = toset(try(var.extra_task_policies_arn, []))
9474
role = aws_iam_role.ecs_task.name

0 commit comments

Comments
 (0)