Remove CreateCloudFrontOriginAccessIdentity from policy, doc update

Signed-off-by: joon <[email protected]>
pirxthepilot · Jul 4, 2022 · 7540056 · 7540056
1 parent f7ef256
commit 7540056
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/README.md b/README.md
@@ -19,7 +19,7 @@ module "mysite_deploy_role" {
   domain                      = "example.com"
   iam_user_arns               = ["arn:aws:iam::111111111111:user/user1", "arn:aws:iam::111111111111:user/user2"]
   s3_bucket_arn               = "arn:aws:s3:::example.com"
-  cloudfront_distribution_arn = "12345678"
+  cloudfront_distribution_arn = "arn:aws:cloudfront::111111111111:distribution/ABCDE12345"
 }
 ```
 

diff --git a/policies.tf b/policies.tf
@@ -82,7 +82,6 @@ data "aws_iam_policy_document" "role_permissions" {
       "cloudfront:TagResource",
       "cloudfront:GetInvalidation",
       "cloudfront:CreateInvalidation",
-      "cloudfront:CreateCloudFrontOriginAccessIdentity",
       "cloudfront:GetDistribution",
       "cloudfront:ListTagsForResource",
       "cloudfront:ListInvalidations",