Merge pull request #1166 from UKHSA-Internal/task/remove-broad-iam-pa…

…ss-role-permission/CDD-2383 Remove broad `PassRole` permission from operations IAM role
UKHSA-Internal · Jan 7, 2025 · 176d79c · 176d79c
2 parents f4b9adf + 307c3c1
commit 176d79c
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/terraform/10-account/iam.operations-role.tf b/terraform/10-account/iam.operations-role.tf
@@ -54,7 +54,6 @@ module "iam_operations_policy" {
             "ecs:DescribeTasks",
             "ecs:ExecuteCommand",
             "ecs:RunTask",
-            "iam:PassRole",
             "logs:StartLiveTail",
             "logs:StopLiveTail"
           ],