Merge pull request #1567 from ministryofjustice/revert-1566-MLPAB-256…

…7-sqs-kms-access Revert "MLPAB-2567 Allow lambda to use sqs key"
ministryofjustice · Oct 22, 2024 · eda3104 · eda3104
2 parents 9c1365e + 8cf2fde
commit eda3104
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/terraform/account/kms_key_sqs.tf b/terraform/account/kms_key_sqs.tf
@@ -61,7 +61,7 @@ data "aws_iam_policy_document" "sqs_kms" {
       type = "Service"
       identifiers = [
         "sqs.amazonaws.com",
-        "events.amazonaws.com",
+        "events.amazonaws.com"
       ]
     }
   }
@@ -136,7 +136,6 @@ data "aws_iam_policy_document" "sqs_kms" {
       type = "AWS"
       identifiers = [
         "arn:aws:iam::${data.aws_caller_identity.global.account_id}:role/breakglass",
-        "arn:aws:iam::${data.aws_caller_identity.global.account_id}:role/event-received-*",
       ]
     }
   }