fix: Revert "feat: Add ECR Public permissions to EKS Auto Mode node I…

…AM role" (#3668) Revert "feat: Add ECR Public permissions to EKS Auto Mode node IAM role (#3665)" This reverts commit c07c26c.
SCT-Engineering · Apr 2, 2026 · f13e8db · f13e8db
1 parent 75b4fc5
commit f13e8db
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/main.tf b/main.tf
@@ -921,9 +921,8 @@ resource "aws_iam_role" "eks_auto" {
 # Policies attached ref https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html
 resource "aws_iam_role_policy_attachment" "eks_auto" {
   for_each = { for k, v in {
-    AmazonEKSWorkerNodeMinimalPolicy             = "${local.iam_role_policy_prefix}/AmazonEKSWorkerNodeMinimalPolicy",
-    AmazonEC2ContainerRegistryPullOnly           = "${local.iam_role_policy_prefix}/AmazonEC2ContainerRegistryPullOnly",
-    AmazonElasticContainerRegistryPublicReadOnly = "${local.iam_role_policy_prefix}/AmazonElasticContainerRegistryPublicReadOnly",
+    AmazonEKSWorkerNodeMinimalPolicy   = "${local.iam_role_policy_prefix}/AmazonEKSWorkerNodeMinimalPolicy",
+    AmazonEC2ContainerRegistryPullOnly = "${local.iam_role_policy_prefix}/AmazonEC2ContainerRegistryPullOnly",
   } : k => v if local.create_node_iam_role }
 
   policy_arn = each.value