diff --git a/root_draft_metadata.tf b/root_draft_metadata.tf index bba1bbb..0bd8ecd 100644 --- a/root_draft_metadata.tf +++ b/root_draft_metadata.tf @@ -48,18 +48,11 @@ module "draft_metadata_api_gateway" { resource "aws_iam_role" "draft_metadata_api_gateway_execution_role" { name = "TDRMetadataChecksAPIGatewayExecutionRole${title(local.environment)}" assume_role_policy = templatefile("./templates/iam_policy/assume_role_policy.json.tpl", { service = "apigateway.amazonaws.com" }) -} -resource "aws_iam_role_policy" "api_gateway_execution_policy" { - name = "TDRMetadataChecksAPIGatewayStepFunctionExecutionPolicy${title(local.environment)}" - role = aws_iam_role.draft_metadata_api_gateway_execution_role.id - policy = templatefile( - "./templates/iam_policy/api_gateway_state_machine_policy.json.tpl", - { - account_id = data.aws_caller_identity.current.account_id, - state_machine_arn = module.draft_metadata_checks.step_function_arn - } - ) + inline_policy { + name = "TDRMetadataChecksAPIGatewayStepFunctionExecutionPolicy${title(local.environment)}" + policy = templatefile("./templates/iam_policy/api_gateway_state_machine_policy.json.tpl", { account_id = data.aws_caller_identity.current.account_id, state_machine_arn = module.draft_metadata_checks.step_function_arn }) + } } module "draft_metadata_bucket" {