From b46c4a3d4d80a970aad660d6f23168a33d17e1ae Mon Sep 17 00:00:00 2001
From: Khalim Conn-Kowlessar <kconnkowlessar@gmail.com>
Date: Fri, 14 Jul 2023 15:11:45 +0100
Subject: [PATCH] removed role definition and instead creating a user with the
 required policy to put to s3 bucket

---
 .../modules/s3_presignable_bucket/main.tf     | 25 +++----------------
 1 file changed, 3 insertions(+), 22 deletions(-)

diff --git a/infrastructure/terraform/modules/s3_presignable_bucket/main.tf b/infrastructure/terraform/modules/s3_presignable_bucket/main.tf
index b8c02106..4d92a6f3 100644
--- a/infrastructure/terraform/modules/s3_presignable_bucket/main.tf
+++ b/infrastructure/terraform/modules/s3_presignable_bucket/main.tf
@@ -50,28 +50,9 @@ resource "aws_secretsmanager_secret_version" "presign_frontend_user_secret_key"
   secret_string = aws_iam_access_key.presign_frontend_user_access_key.secret
 }
 
-resource "aws_iam_role" "presign_frontend_role" {
-  name = "presign_frontend_role-${var.environment}"
-  assume_role_policy = <<EOF
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Action": "sts:AssumeRole",
-      "Principal": {
-        "Service": "ec2.amazonaws.com"
-      },
-      "Effect": "Allow",
-      "Sid": ""
-    }
-  ]
-}
-EOF
-}
-
-resource "aws_iam_role_policy" "presign_frontend_policy" {
-  name = "presign_frontend_policy-${var.environment}"
-  role = aws_iam_role.presign_frontend_role.id
+resource "aws_iam_user_policy" "presign_frontend_user_policy" {
+  name = "presign_frontend_user_policy-${var.environment}"
+  user = aws_iam_user.presign_frontend_user.name
 
   policy = <<EOF
 {