From b4cb30eb5b04902c376f4b2c4bcd2fb76bd8f14d Mon Sep 17 00:00:00 2001
From: "Matthew C. Morgan" <matthew.c.morgan@census.gov>
Date: Fri, 20 Mar 2026 13:28:30 -0400
Subject: [PATCH] update from comments

---
 policies/sc-dbuser/policy.tf   | 8 --------
 policies/sc-dbuser/settings.tf | 4 ++--
 2 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/policies/sc-dbuser/policy.tf b/policies/sc-dbuser/policy.tf
index 0812850..e073441 100644
--- a/policies/sc-dbuser/policy.tf
+++ b/policies/sc-dbuser/policy.tf
@@ -84,14 +84,6 @@ data "aws_iam_policy_document" "inline" {
       "secretsmanager:DescribeSecret",
       "secretsmanager:GetSecretValue",
     ]
-    # Enforce expected principal attribute shape: 8-character JBID.
-    condition {
-      test     = "StringLike"
-      variable = "aws:PrincipalTag/jbid"
-      values = [
-        "????????"
-      ]
-    }
     # Secret must be tagged to the same JBID as the caller.
     condition {
       test     = "StringEquals"
diff --git a/policies/sc-dbuser/settings.tf b/policies/sc-dbuser/settings.tf
index 90cf79d..7e8bede 100644
--- a/policies/sc-dbuser/settings.tf
+++ b/policies/sc-dbuser/settings.tf
@@ -5,6 +5,6 @@ locals {
     "ReadOnlyAccess",
   ]
   customer_managed_policy_names = {}
-  relay_state   = null
-  inline_policy = data.aws_iam_policy_document.inline
+  relay_state                   = null
+  inline_policy                 = data.aws_iam_policy_document.inline
 }