refactor: remove unneeded debug permissions (#109)

lacework · Feb 6, 2023 · 101cbcd · 101cbcd
1 parent fbefc5d
commit 101cbcd
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/main.tf b/main.tf
@@ -498,18 +498,11 @@ data "aws_iam_policy_document" "cross_account_policy" {
     resources = ["*"]
     actions = [
       "cloudtrail:DescribeTrails",
-      "cloudtrail:GetTrail",
       "cloudtrail:GetTrailStatus",
-      "cloudtrail:ListPublicKeys",
-      "s3:GetBucketAcl",
       "s3:GetBucketPolicy",
-      "s3:ListAllMyBuckets",
       "s3:GetBucketLocation",
-      "s3:GetBucketLogging",
-      "sns:GetSubscriptionAttributes",
       "sns:GetTopicAttributes",
       "sns:ListSubscriptions",
-      "sns:ListSubscriptionsByTopic",
       "sns:ListTopics"
     ]
   }