further testing

ministryofjustice · Jun 11, 2024 · eb32fdf · eb32fdf
1 parent abecbf6
commit eb32fdf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/terraform/environments/bootstrap/member-bootstrap/iam.tf b/terraform/environments/bootstrap/member-bootstrap/iam.tf
@@ -258,9 +258,9 @@ data "aws_iam_policy_document" "member-access" {
       ]
       resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097
       condition {
-        test     = "ForAllValues:StringEquals"
+        test     = "StringEquals"
         variable = "cloudformation:ResourceTypes"
-        values   = [ "AWS::WAFv2::WebACL", "AWS::S3::Bucket" ]
+        values   = [ "AWS::WAFv2::WebACL" ]
       }
   }