diff --git a/policies/sc-dbuser/policy.tf b/policies/sc-dbuser/policy.tf
index 0812850..e073441 100644
--- a/policies/sc-dbuser/policy.tf
+++ b/policies/sc-dbuser/policy.tf
@@ -84,14 +84,6 @@ data "aws_iam_policy_document" "inline" {
       "secretsmanager:DescribeSecret",
       "secretsmanager:GetSecretValue",
     ]
-    # Enforce expected principal attribute shape: 8-character JBID.
-    condition {
-      test     = "StringLike"
-      variable = "aws:PrincipalTag/jbid"
-      values = [
-        "????????"
-      ]
-    }
     # Secret must be tagged to the same JBID as the caller.
     condition {
       test     = "StringEquals"
diff --git a/policies/sc-dbuser/settings.tf b/policies/sc-dbuser/settings.tf
index 90cf79d..7e8bede 100644
--- a/policies/sc-dbuser/settings.tf
+++ b/policies/sc-dbuser/settings.tf
@@ -5,6 +5,6 @@ locals {
     "ReadOnlyAccess",
   ]
   customer_managed_policy_names = {}
-  relay_state   = null
-  inline_policy = data.aws_iam_policy_document.inline
+  relay_state                   = null
+  inline_policy                 = data.aws_iam_policy_document.inline
 }