Skip to content

Commit de5471f

Browse files
authored
Merge pull request #43 from Homebrew/import2
2 parents ca0ce74 + 9311703 commit de5471f

File tree

2 files changed

+59
-61
lines changed

2 files changed

+59
-61
lines changed

.terraform.lock.hcl

+56-56
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

aws/roles.tf

+3-5
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,9 @@ data "aws_iam_policy_document" "codebuild_policy_document" {
3434
}
3535

3636
resource "aws_iam_policy" "opentofu_policy" {
37-
name = "OpentofuPolicy"
37+
name = "OpentofuApplyPolicy"
3838
path = "/"
39-
description = "Policy to allow Opentofu to do it's thing"
39+
description = "Policy to allow Opentofu to apply infrastructure changes"
4040

4141
policy = data.aws_iam_policy_document.codebuild_policy_document.json
4242
}
@@ -80,9 +80,7 @@ resource "aws_iam_role" "github_tf" {
8080
Version = "2012-10-17"
8181
})
8282
managed_policy_arns = [
83-
"arn:aws:iam::aws:policy/AmazonS3FullAccess",
84-
"arn:aws:iam::aws:policy/AWSSSOReadOnly",
85-
"arn:aws:iam::aws:policy/IAMReadOnlyAccess",
83+
"arn:aws:iam::aws:policy/AdministratorAccess",
8684
aws_iam_policy.opentofu_policy.arn
8785
]
8886
}

0 commit comments

Comments
 (0)