remove unnecessary permissions in the dispatcher

edersonbrilhante · edersonbrilhante · commit 5c6bf592b82d · 2025-11-10T12:32:55.000+01:00
diff --git a/modules/webhook/eventbridge/dispatcher.tf b/modules/webhook/eventbridge/dispatcher.tf
@@ -131,7 +131,6 @@ resource "aws_iam_role_policy" "dispatcher_ssm" {
   policy = templatefile("${path.module}/../policies/lambda-ssm.json", {
     resource_arns = jsonencode(
       concat(
-        [var.config.github_app_parameters.webhook_secret.arn],
         [for p in var.config.ssm_parameter_runner_matcher_config : p.arn]
       )
     )

Original file line number	Diff line number	Diff line change
`@@ -131,7 +131,6 @@ resource "aws_iam_role_policy" "dispatcher_ssm" {`
`131`	`131`	`policy = templatefile("${path.module}/../policies/lambda-ssm.json", {`
`132`	`132`	`resource_arns = jsonencode(`
`133`	`133`	`concat(`
`134`		`- [var.config.github_app_parameters.webhook_secret.arn],`
`135`	`134`	`[for p in var.config.ssm_parameter_runner_matcher_config : p.arn]`
`136`	`135`	`)`
`137`	`136`	`)`