Merge pull request #59 from silinternational/feature/clean-up-lambda-…

…role-policy Remove the duplicate "..._global" resource from IAM policy
silinternational · Aug 21, 2023 · a291459 · a291459
2 parents 2e6c9d4 + 5439f39
commit a291459
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/terraform/lambda-role-policy.json b/terraform/lambda-role-policy.json
@@ -35,8 +35,7 @@
         "dynamodb:GetItem"
       ],
       "Resource": [
-        "arn:aws:dynamodb:*:${aws_account}:table/${api_key_table}",
-        "arn:aws:dynamodb:*:${aws_account}:table/${api_key_table}_global"
+        "arn:aws:dynamodb:*:${aws_account}:table/${api_key_table}"
       ],
       "Effect": "Allow"
     },
@@ -51,8 +50,7 @@
         "dynamodb:DeleteItem"
       ],
       "Resource": [
-        "arn:aws:dynamodb:*:${aws_account}:table/${webauthn_table}",
-        "arn:aws:dynamodb:*:${aws_account}:table/${webauthn_table}_global"
+        "arn:aws:dynamodb:*:${aws_account}:table/${webauthn_table}"
       ],
       "Effect": "Allow"
     }