Remove SID from ES access policy (#76)

cloudposse · Oct 16, 2020 · f43c13c · f43c13c
1 parent 608b67f
commit f43c13c
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -202,7 +202,6 @@ data "aws_iam_policy_document" "default" {
   count = module.this.enabled && (length(var.iam_authorizing_role_arns) > 0 || length(var.iam_role_arns) > 0) ? 1 : 0
 
   statement {
-    sid    = "AllowEsAccessToSpecifiedRoles"
     effect = "Allow"
 
     actions = distinct(compact(var.iam_actions))
@@ -224,7 +223,6 @@ data "aws_iam_policy_document" "default" {
   dynamic "statement" {
     for_each = length(var.allowed_cidr_blocks) > 0 && ! var.vpc_enabled ? [true] : []
     content {
-      sid    = "AllowAnonymousEsAccessFromCIDR"
       effect = "Allow"
 
       actions = distinct(compact(var.iam_actions))