TOG-558: remove DescribeOrg perm as its no longer needed (#67)

expel-io · Nov 25, 2024 · e23ed38 · e23ed38
1 parent da88aec
commit e23ed38
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/iam.tf b/iam.tf
@@ -153,7 +153,6 @@ data "aws_iam_policy_document" "cloudtrail_manager_iam_document" {
       "lambda:ListFunctions",
       "lightsail:GetInstances",
       "lightsail:GetRegions",
-      "organizations:DescribeOrganization",
       "organizations:ListAccounts",
       "rds:DescribeDBInstances",
       "rds:ListTagsForResource",

diff --git a/stackset_template.tf b/stackset_template.tf
@@ -77,7 +77,6 @@ locals {
                                 "lambda:ListFunctions",
                                 "lightsail:GetInstances",
                                 "lightsail:GetRegions",
-                                "organizations:DescribeOrganization",
                                 "organizations:ListAccounts",
                                 "rds:DescribeDBInstances",
                                 "rds:ListTagsForResource",