diff --git a/main.tf b/main.tf index 583caa1..41ad18e 100644 --- a/main.tf +++ b/main.tf @@ -186,22 +186,6 @@ data "aws_iam_policy_document" "resource_push_access" { ] } - dynamic "statement" { - for_each = length(var.principals_lambda) > 0 ? [1] : [] - - content { - sid = "LambdaECRImageCrossAccountRetrievalPolicy" - effect = "Allow" - actions = [ - "ecr:BatchGetImage", - "ecr:GetDownloadUrlForLayer" - ] - - principals { - type = "Service" - identifiers = ["lambda.amazonaws.com"] - } - condition { test = "StringLike" values = formatlist("arn:%s:lambda:*:%s:function:*", data.aws_partition.current.partition, var.principals_lambda)