Merge pull request #21 from trussworks/am-access-analyzer

Adding access analyzer
trussworks · May 5, 2021 · 4673a8f · 4673a8f
2 parents 878baa9 + cc9386d
commit 4673a8f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -202,6 +202,7 @@ data "aws_iam_policy_document" "combined_policy_block" {
       # These actions do not operate in a specific region, or only run in
       # a single region, so we don't want to try restricting them by region.
       not_actions = [
+        "access-analyzer:*",
         "iam:*",
         "organizations:*",
         "route53:*",