UNDO: Added https enforce policy on ehr_repo_permit_developer_to_see_access_logs_policy

oliverbeumkes-nhs · oliverbeumkes-nhs · commit ea3244f11c7b · 2025-06-25T12:27:33.000+01:00
diff --git a/terraform/s3.tf b/terraform/s3.tf
@@ -187,21 +187,6 @@ resource "aws_s3_bucket_policy" "ehr_repo_permit_developer_to_see_access_logs_po
             "aws:SecureTransport" : "false"
           }
         }
-      },
-      {
-        "Sid" : "S3EnforceHTTPSPolicy",
-        "Effect" : "Deny",
-        "Principal" : "*",
-        "Action" : "s3:*",
-        "Resource" : [
-          aws_s3_bucket.ehr_repo_access_logs.arn,
-          "${aws_s3_bucket.ehr_repo_access_logs.arn}/*"
-        ],
-        "Condition" : {
-          "Bool" : {
-            "aws:SecureTransport" : "false"
-          }
-        }
       }
     ]
   })

Original file line number	Diff line number	Diff line change
`@@ -187,21 +187,6 @@ resource "aws_s3_bucket_policy" "ehr_repo_permit_developer_to_see_access_logs_po`
`187`	`187`	`"aws:SecureTransport" : "false"`
`188`	`188`	`}`
`189`	`189`	`}`
`190`		`- },`
`191`		`- {`
`192`		`- "Sid" : "S3EnforceHTTPSPolicy",`
`193`		`- "Effect" : "Deny",`
`194`		`- "Principal" : "*",`
`195`		`- "Action" : "s3:*",`
`196`		`- "Resource" : [`
`197`		`- aws_s3_bucket.ehr_repo_access_logs.arn,`
`198`		`- "${aws_s3_bucket.ehr_repo_access_logs.arn}/*"`
`199`		`- ],`
`200`		`- "Condition" : {`
`201`		`- "Bool" : {`
`202`		`- "aws:SecureTransport" : "false"`
`203`		`- }`
`204`		`- }`
`205`	`190`	`}`
`206`	`191`	`]`
`207`	`192`	`})`