Merge pull request #41 from Homebrew/SMillerDev-patch-1

iMichka · web-flow · commit 7f8f905ba028 · 2025-04-08T23:17:30.000+02:00
fix: do not restrict tagging
diff --git a/aws/roles.tf b/aws/roles.tf
@@ -17,8 +17,7 @@ data "aws_iam_policy_document" "codebuild_policy_document" {
       "elasticloadbalancing:*",
       "iam:DeleteGroupMembership",
       "iam:DetachRolePolicy",
-      "iam:DeletePolicy",
-      "sso:TagResource"
+      "iam:DeletePolicy"
     ]
     resources = [
       "arn:aws:s3:::homebrew-terraform-state/*",
@@ -30,6 +29,7 @@ data "aws_iam_policy_document" "codebuild_policy_document" {
     effect = "Allow"
     actions = [
       "iam:*",
+      "sso:TagResource"
     ]
     resources = ["*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -17,8 +17,7 @@ data "aws_iam_policy_document" "codebuild_policy_document" {`
`17`	`17`	`"elasticloadbalancing:*",`
`18`	`18`	`"iam:DeleteGroupMembership",`
`19`	`19`	`"iam:DetachRolePolicy",`
`20`		`- "iam:DeletePolicy",`
`21`		`- "sso:TagResource"`
	`20`	`+ "iam:DeletePolicy"`
`22`	`21`	`]`
`23`	`22`	`resources = [`
`24`	`23`	`"arn:aws:s3:::homebrew-terraform-state/*",`
`@@ -30,6 +29,7 @@ data "aws_iam_policy_document" "codebuild_policy_document" {`
`30`	`29`	`effect = "Allow"`
`31`	`30`	`actions = [`
`32`	`31`	`"iam:*",`
	`32`	`+ "sso:TagResource"`
`33`	`33`	`]`
`34`	`34`	`resources = ["*"]`
`35`	`35`	`}`