revert previous commit

kunduso · Dec 2, 2024 · fae3ebe · fae3ebe
1 parent 3240c3a
commit fae3ebe
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/app/tf/ecr.tf b/app/tf/ecr.tf
@@ -2,7 +2,7 @@ data "aws_caller_identity" "current" {}
 locals {
   principal_root_arn       = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:root"
   development_account      = "743794601996"
-  development_env_role_arn = "arn:aws:iam::${local.development_account}:role/*"
+  development_env_root_arn = "arn:aws:iam::${local.development_account}:root"
 }
 #https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository
 resource "aws_ecr_repository" "image_repo" {
@@ -28,7 +28,7 @@ resource "aws_ecr_repository_policy" "repository_policy" {
         Sid    = "AllowCrossAccountPull"
         Effect = "Allow"
         Principal = {
-          AWS = "${local.development_env_role_arn}"
+          AWS = "${local.development_env_root_arn}"
         }
         Action = [
           "ecr:BatchCheckLayerAvailability",

diff --git a/app/tf/kms.tf b/app/tf/kms.tf
@@ -29,7 +29,7 @@ resource "aws_kms_key_policy" "ecr_key_policy" {
       {
         Effect = "Allow"
         Principal = {
-          AWS = "${local.development_env_role_arn}"
+          AWS = "${local.development_env_root_arn}"
         }
         Action   = ["kms:Decrypt"]
         Resource = "*"