[ELI-702] - swapping arn to all for config actions

TOEL2 · TOEL2 · commit afa6788b43c8 · 2026-03-27T09:35:52.000Z
diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -731,7 +731,7 @@ resource "aws_iam_policy" "code_signing_management" {
           "lambda:DeleteFunctionCodeSigningConfig",
           "lambda:PutFunctionCodeSigningConfig"
         ],
-        Resource = "arn:aws:lambda:*:${data.aws_caller_identity.current.account_id}:function:eligibility_signposting_api:*",
+        Resource = "*"
       },
       {
         Sid    = "SignerJobUsage",

Original file line number	Diff line number	Diff line change
`@@ -731,7 +731,7 @@ resource "aws_iam_policy" "code_signing_management" {`
`731`	`731`	`"lambda:DeleteFunctionCodeSigningConfig",`
`732`	`732`	`"lambda:PutFunctionCodeSigningConfig"`
`733`	`733`	`],`
`734`		`- Resource = "arn:aws:lambda::${data.aws_caller_identity.current.account_id}:function:eligibility_signposting_api:",`
	`734`	`+ Resource = "*"`
`735`	`735`	`},`
`736`	`736`	`{`
`737`	`737`	`Sid = "SignerJobUsage",`