unrestricted rds:AddTagsToResource

ministryofjustice · Feb 23, 2024 · a25021a · a25021a
1 parent 018f8ec
commit a25021a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -261,7 +261,6 @@ data "aws_iam_policy_document" "irsa" {
       "rds:DeleteBlueGreenDeployment",
       "rds:DescribeBlueGreenDeployments",
       "rds:SwitchoverBlueGreenDeployment",
-      "rds:AddTagsToResource",
     ]
 
     resources = [
@@ -276,6 +275,7 @@ data "aws_iam_policy_document" "irsa" {
     effect = "Allow"
     actions = [
       "rds:CreateDBInstanceReadReplica",
+      "rds:AddTagsToResource",
     ]
 
     resources = [