iam:DeleteRolePolicy

carlssonk · Sep 28, 2024 · e109cb7 · e109cb7
1 parent 0f81d07
commit e109cb7
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/nat/iam/main.tf b/modules/nat/iam/main.tf
@@ -31,6 +31,13 @@ data "aws_iam_policy_document" "this" {
     resources = ["arn:aws:ec2:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:launch-template/*"]
     effect    = "Allow"
   }
+  statement {
+    actions = [
+      "iam:DeleteRolePolicy" # temporary
+    ]
+    resources = ["*"]
+    effect    = "Allow"
+  }
   # dynamic "statement" {
   #   for_each = var.nat_type == "fck-nat" ? ["x"] : []
   #   content {