Merge pull request #6 from ottertune/remove-db-connect

[FE-285] remove db-connect from tf
ottertune · Oct 5, 2023 · e6ad36c · e6ad36c
2 parents 63f8b97 + 4149d89
commit e6ad36c
Showing 1 changed file with 1 addition and 10 deletions.
diff --git a/main.tf b/main.tf
@@ -57,14 +57,6 @@ data "aws_iam_policy_document" "ottertune_db_policy" {
 }
 
 
-data "aws_iam_policy_document" "ottertune_connect_policy" {
-  statement {
-    actions   = ["rds-db:connect"]
-    resources = ["arn:aws:rds-db:*:*:dbuser:*/ottertune*"]
-  }
-}
-
-
 data "aws_iam_policy_document" "ottertune_copy_pg_policy" {
   statement {
     actions   = [
@@ -116,8 +108,7 @@ data "aws_iam_policy_document" "ottertune_cluster_tuning_policy" {
 }
 
 data "aws_iam_policy_document" "ottertune_policy_document_combined" {
-  source_policy_documents = concat([data.aws_iam_policy_document.ottertune_db_policy.json,
-    data.aws_iam_policy_document.ottertune_connect_policy.json],
+  source_policy_documents = concat([data.aws_iam_policy_document.ottertune_db_policy.json],
     var.permissions_level == "write_limited" ? [data.aws_iam_policy_document.ottertune_copy_pg_policy.json, data.aws_iam_policy_document.ottertune_pg_policy.json, data.aws_iam_policy_document.ottertune_cluster_pg_policy.json] :  [],
     length(var.tunable_parameter_group_arns) > 0 ? [data.aws_iam_policy_document.ottertune_tuning_policy.json] : [],
   length(var.tunable_aurora_cluster_parameter_group_arns) > 0 ? [data.aws_iam_policy_document.ottertune_cluster_tuning_policy.json] : [])