[ELI] removing deny for update assume role

TOEL2 · TOEL2 · commit 837b0aeae63b · 2026-04-13T10:56:13.000+01:00
diff --git a/infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf b/infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf
@@ -416,7 +416,6 @@ data "aws_iam_policy_document" "iam_bootstrap_permissions_boundary" {
       "iam:DetachRolePolicy",
       "iam:PutRolePolicy",
       "iam:DeleteRolePolicy",
-      "iam:UpdateAssumeRolePolicy",
       "iam:PutRolePermissionsBoundary",
       "iam:DeleteRolePermissionsBoundary",
     ]

Original file line number	Diff line number	Diff line change
`@@ -416,7 +416,6 @@ data "aws_iam_policy_document" "iam_bootstrap_permissions_boundary" {`
`416`	`416`	`"iam:DetachRolePolicy",`
`417`	`417`	`"iam:PutRolePolicy",`
`418`	`418`	`"iam:DeleteRolePolicy",`
`419`		`- "iam:UpdateAssumeRolePolicy",`
`420`	`419`	`"iam:PutRolePermissionsBoundary",`
`421`	`420`	`"iam:DeleteRolePermissionsBoundary",`
`422`	`421`	`]`