update from comments

terraform-modules · Mar 20, 2026 · b4cb30e · b4cb30e
1 parent ffd68d8
commit b4cb30e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 10 deletions.
diff --git a/policies/sc-dbuser/policy.tf b/policies/sc-dbuser/policy.tf
@@ -84,14 +84,6 @@ data "aws_iam_policy_document" "inline" {
       "secretsmanager:DescribeSecret",
       "secretsmanager:GetSecretValue",
     ]
-    # Enforce expected principal attribute shape: 8-character JBID.
-    condition {
-      test     = "StringLike"
-      variable = "aws:PrincipalTag/jbid"
-      values = [
-        "????????"
-      ]
-    }
     # Secret must be tagged to the same JBID as the caller.
     condition {
       test     = "StringEquals"

diff --git a/policies/sc-dbuser/settings.tf b/policies/sc-dbuser/settings.tf
@@ -5,6 +5,6 @@ locals {
     "ReadOnlyAccess",
   ]
   customer_managed_policy_names = {}
-  relay_state   = null
-  inline_policy = data.aws_iam_policy_document.inline
+  relay_state                   = null
+  inline_policy                 = data.aws_iam_policy_document.inline
 }