fix: Fix AllowGetCertificates statement scope for ALB controller role (…

…#196) Co-authored-by: Bryant Biggs <[email protected]>
aws-ia · Jun 30, 2023 · f120cc1 · f120cc1
1 parent c8cb8a0
commit f120cc1
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -948,8 +948,7 @@ data "aws_iam_policy_document" "aws_load_balancer_controller" {
     sid    = "AllowGetCertificates"
     effect = "Allow"
     resources = [
-      "arn:${local.partition}:acm:${local.region}:${local.account_id}:*",
-      "arn:${local.partition}:acm:${local.region}:${local.account_id}:certificate/*"
+      "*",
     ]
 
     actions = [