Skip to content

Commit 086e0d9

Browse files
committed
Fix aws-ecs-* task execution role permissions
1 parent 856ebb0 commit 086e0d9

File tree

2 files changed

+0
-2
lines changed

2 files changed

+0
-2
lines changed

aws-ecs-job-fargate/iam.tf

-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,6 @@ resource "aws_iam_role" "task_execution_role" {
1919
# the specific ECR arn if applicable, and the specific cloudwatch log group.
2020
# Either pass both identifiers in, or pass the entire role ARN as an argument
2121
resource "aws_iam_role_policy_attachment" "task_execution_role" {
22-
count = var.registry_secretsmanager_arn != null ? 1 : 0
2322
role = aws_iam_role.task_execution_role.name
2423
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
2524
}

aws-ecs-service-fargate/iam.tf

-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,6 @@ resource "aws_iam_role" "task_execution_role" {
1818
# TODO: Add support for giving permissions to ECR ARNs and possibly cloudwatch log group
1919
# Or provide ability to pass in own execution role ARN
2020
resource "aws_iam_role_policy_attachment" "task_execution_role" {
21-
count = var.registry_secretsmanager_arn != null ? 1 : 0
2221
role = aws_iam_role.task_execution_role.name
2322
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
2423
}

0 commit comments

Comments
 (0)