screw it, be permissive

beggers · Jun 25, 2024 · 24c1639 · 24c1639
1 parent 41f9def
commit 24c1639
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/terraform/github_actions.tf b/terraform/github_actions.tf
@@ -33,9 +33,9 @@ resource "aws_iam_role" "github_actions" {
 data "aws_iam_policy_document" "github_actions_policy" {
   statement {
     actions = [
-      "cloudfront:GetCloudFrontOriginAccessIdentity",
-      "cloudfront:CreateInvalidation",
-      "iam:GetOpenIDConnectProvider",
+      "acm:*",
+      "cloudfront:*",
+      "iam:*",
       "route53:*",
       "s3:*",
     ]