fix: remove user group, approved_arns is fine

aws-s3-backend/assume_role.tf

@@ -21,23 +21,3 @@ resource "aws_iam_role_policy_attachment" "terraform_role_admin_access" {
   policy_arn = "arn:aws:iam::aws:policy/AdministratorAccess"
 }
 
-# Create the IAM group
-resource "aws_iam_group" "infrastructure_user_group" {
-  name = "${var.prefix}-iac-users"
-}
-
-# Attach the policy to allow group members to assume the role
-resource "aws_iam_group_policy" "infrastructure_user_policy" {
-  group = aws_iam_group.infrastructure_user_group.name
-
-  policy = jsonencode({
-    Version = "2012-10-17",
-    Statement = [
-      {
-        Effect   = "Allow",
-        Action   = "sts:AssumeRole",
-        Resource = aws_iam_role.iac_role.arn
-      }
-    ]
-  })
-}

aws-s3-backend/example/main.tf

@@ -0,0 +1,12 @@
+
+module "s3_backend" {
+  source = "../."
+  prefix = "example"
+  environments = [
+    "dev"
+  ]
+
+  approved_arns = [
+    "arn:aws:iam::013948180024:user/desktop"
+  ]
+}