Secret rotation permissions boundary fix (#549)

Temporarily remove permissions boundary
govuk-one-login · Feb 8, 2024 · 85e2e61 · 85e2e61
1 parent 01f474d
commit 85e2e61
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/iac/main/resources/redshift.yml b/iac/main/resources/redshift.yml
@@ -73,6 +73,8 @@ RedshiftSecretRotationLambda:
   # checkov:skip=CKV_AWS_116: DLQ not needed
   Type: AWS::Serverless::Function
   Properties:
+    # todo remove this once secretsmanager permissions have been added to secure pipelines permissions boundary
+    PermissionsBoundary: !Ref AWS::NoValue
     FunctionName: redshift-rotate-secret
     Handler: redshift-rotate-secret.handler
     Policies: