Updated to remove condition is s3 policy iam. (#176)

slalom · Aug 3, 2023 · 15a217b · 15a217b
1 parent c9635f1
commit 15a217b
Showing 1 changed file with 0 additions and 4 deletions.
diff --git a/catalog/aws/data-lake-users/iam.tf b/catalog/aws/data-lake-users/iam.tf
@@ -99,10 +99,6 @@ resource "aws_iam_policy" "group_s3_permission" {
       "Sid": "AllowS3ListingON${replace(replace(replace(grant.path, "/", ""), "-", ""), "_", "")}",
       "Action": ["s3:ListBucket"],
       "Resource": ["arn:aws:s3:::${var.data_bucket}"],
-      ${grant.path == "" ? "" : <<EOF
-"Condition":{"StringEquals":{"s3:prefix":["${grant.path}"],"s3:delimiter":["/"]}},
-EOF
-  }
       "Effect": "Allow"
     }
 EOF2