polciy

infrastructure/terraform/modules/lambda_execution_role/main.tf

@@ -19,19 +19,3 @@ resource "aws_iam_role_policy_attachment" "basic_logs" {
   policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
 }
 
-# resource "aws_iam_role_policy" "ecr_pull" {
-#   role = aws_iam_role.this.name
-
-#   policy = jsonencode({
-#     Version = "2012-10-17"
-#     Statement = [{
-#       Effect = "Allow"
-#       Action = [
-#         "ecr:GetAuthorizationToken",
-#         "ecr:BatchGetImage",
-#         "ecr:GetDownloadUrlForLayer"
-#       ]
-#       Resource = "*"
-#     }]
-#   })
-# }

infrastructure/terraform/modules/lambda_sqs_trigger/main.tf

@@ -5,19 +5,4 @@ resource "aws_lambda_event_source_mapping" "this" {
   enabled          = true
 }
 
-resource "aws_iam_role_policy" "allow_sqs" {
-  role = var.lambda_role_name
 
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [{
-      Effect = "Allow"
-      Action = [
-        "sqs:ReceiveMessage",
-        "sqs:DeleteMessage",
-        "sqs:GetQueueAttributes"
-      ]
-      Resource = var.queue_arn
-    }]
-  })
-}