Revert "Add trust policy for Jenkins to sfn role"

This reverts commit f204c7c.
Crown-Commercial-Service · Oct 15, 2024 · 6286f04 · 6286f04
1 parent f204c7c
commit 6286f04
Showing 1 changed file with 3 additions and 14 deletions.
diff --git a/modules/postgres-etl/load/load_sfn.tf b/modules/postgres-etl/load/load_sfn.tf
@@ -61,24 +61,13 @@ resource "aws_iam_role" "s3_to_rds_sfn" {
     Statement = [
       {
         Action = "sts:AssumeRole"
-       Effect = "Allow"
-        Sid = "AllowStatesAssumeRole"
 
-        Principal = {
-          Service = "states.amazonaws.com"
-        }
-      },
-      {
-        Action = "sts:AssumeRole"
         Effect = "Allow"
-        Sid = "AllowJenkinsAssumeRole"
+
+        Sid = "AllowStatesAssumeRole"
 
         Principal = {
-          AWS = [
-            "arn:aws:iam::665505400356:role/eks-paas-mountpoint-s3-csi-driver", # Sandbox
-            # "arn:aws:iam::473251818902:role/eks-paas-mountpoint-s3-csi-driver", # Dev
-            # "arn:aws:iam::974531504241:role/eks-paas-mountpoint-s3-csi-driver", # Prod
-          ]
+          Service = "states.amazonaws.com"
         }
       }
     ]