From bdc3959ac3761327c15f0c4fe1b15d7f9973f446 Mon Sep 17 00:00:00 2001 From: Marco Suma Date: Mon, 29 Apr 2024 16:06:35 +0200 Subject: [PATCH] chore: Minimise permissions when not needed. --- .../cloudbackupschedule/resource_cloud_backup_schedule_test.go | 2 +- .../resource_cloud_provider_access_authorization_test.go | 2 +- .../encryptionatrest/resource_encryption_at_rest_test.go | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/internal/service/cloudbackupschedule/resource_cloud_backup_schedule_test.go b/internal/service/cloudbackupschedule/resource_cloud_backup_schedule_test.go index 6a8220f730..b6dcc05229 100644 --- a/internal/service/cloudbackupschedule/resource_cloud_backup_schedule_test.go +++ b/internal/service/cloudbackupschedule/resource_cloud_backup_schedule_test.go @@ -790,7 +790,7 @@ func configExportPolicies(info *acc.ClusterInfo, policyName, roleName, awsAccess "Version": "2012-10-17", "Statement": [ { - "Effect": "Allow", + "Effect": "Deny", "Action": "*", "Resource": "*" } diff --git a/internal/service/cloudprovideraccess/resource_cloud_provider_access_authorization_test.go b/internal/service/cloudprovideraccess/resource_cloud_provider_access_authorization_test.go index bf1791afba..c1be438cd5 100644 --- a/internal/service/cloudprovideraccess/resource_cloud_provider_access_authorization_test.go +++ b/internal/service/cloudprovideraccess/resource_cloud_provider_access_authorization_test.go @@ -75,7 +75,7 @@ resource "aws_iam_role_policy" "test_policy" { "Version": "2012-10-17", "Statement": [ { - "Effect": "Allow", + "Effect": "Deny", "Action": "*", "Resource": "*" } diff --git a/internal/service/encryptionatrest/resource_encryption_at_rest_test.go b/internal/service/encryptionatrest/resource_encryption_at_rest_test.go index 639253046d..4392b8d8cc 100644 --- a/internal/service/encryptionatrest/resource_encryption_at_rest_test.go +++ b/internal/service/encryptionatrest/resource_encryption_at_rest_test.go @@ -46,7 +46,7 @@ resource "aws_iam_role_policy" "test_policy" { "Version": "2012-10-17", "Statement": [ { - "Effect": "Allow", + "Effect": "Deny", "Action": "*", "Resource": "*" }