🐛 Fixing Glue Policy Size (#4015)

Shortening the policy.
ministryofjustice · Apr 10, 2024 · 16ca040 · 16ca040
1 parent 94c0a2e
commit 16ca040
Showing 1 changed file with 2 additions and 8 deletions.
diff --git a/terraform/aws/analytical-platform-data-production/data-engineering-pipelines/glue.tf b/terraform/aws/analytical-platform-data-production/data-engineering-pipelines/glue.tf
@@ -43,17 +43,11 @@ data "aws_iam_policy_document" "glue_ireland" {
             data.aws_iam_role.glue_policy_role[role_arn].arn
           ]],
           [
-            data.aws_iam_role.aws_sso_modernisation_platform_data_eng.arn
+            data.aws_iam_role.aws_sso_modernisation_platform_data_eng.arn,
+            "arn:aws:iam::${data.aws_caller_identity.current.account_id}:root"
           ]
         ])
       }
-      condition {
-        test     = "StringNotEquals"
-        variable = "aws:PrincipalAccount"
-        values = [
-          data.aws_caller_identity.current.account_id
-        ]
-      }
     }
   }
 }