From de338f753bfbde9017ec5abdaae0ce2409d5fa1f Mon Sep 17 00:00:00 2001
From: Oliver Schoenborn <oliver@sentianSE.com>
Date: Fri, 17 Mar 2023 17:14:58 -0400
Subject: [PATCH] remove obsolete resource

---
 bucket.tf  | 19 -------------------
 main.tf    |  4 +++-
 outputs.tf |  2 --
 3 files changed, 3 insertions(+), 22 deletions(-)

diff --git a/bucket.tf b/bucket.tf
index 2d6034c..b8823ed 100644
--- a/bucket.tf
+++ b/bucket.tf
@@ -195,22 +195,3 @@ resource "aws_iam_policy" "multi_stack_backends_module" {
 }
 POLICY
 }
-
-resource "aws_iam_policy" "multi_stack_backends_stack" {
-  for_each = local.iam_stacks_map
-
-  name = "multi-stack-backends.${local.manager_stack_id}.${each.key}"
-
-  policy = <<POLICY
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Action": ["s3:GetObject", "s3:PutObject"],
-      "Resource": "${aws_s3_bucket.tfstate_backends.arn}/${each.key}/*"
-    }
-  ]
-}
-POLICY
-}
diff --git a/main.tf b/main.tf
index e4b0ca8..c04b7ac 100644
--- a/main.tf
+++ b/main.tf
@@ -30,6 +30,7 @@ resource "local_file" "this_backend" {
     tfstate_lock_dyndb_table_id = aws_dynamodb_table.backend_locks.id
     tfstate_backends_bucket_id  = aws_s3_bucket.tfstate_backends.id
     tfstate_backends_s3_obj_key = "${var.manager_s3_key_prefix}/terraform.tfstate"
+    tfstate_main_region         = data.aws_region.tfstate_backends.name
   })
 }
 
@@ -42,5 +43,6 @@ resource "local_file" "stack_backend" {
     tfstate_lock_dyndb_table_id = aws_dynamodb_table.backend_locks.id
     tfstate_backends_bucket_id  = aws_s3_bucket.tfstate_backends.id
     tfstate_backends_s3_obj_key = "${each.value.stack_id}/${each.value.module_id}/terraform.tfstate"
+    tfstate_main_region         = data.aws_region.tfstate_backends.name
   })
-}
\ No newline at end of file
+}
diff --git a/outputs.tf b/outputs.tf
index 401be0f..71dd0a1 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -31,8 +31,6 @@ output "access_control_iam_policies_for_tfstates" {
   value = {
     common     = aws_iam_policy.multi_stack_backends_common.name
     manager    = one(aws_iam_policy.multi_stack_backends_manager[*].name)
-    stacks     = [for p in aws_iam_policy.multi_stack_backends_stack : p.name]
     sub_stacks = [for p in aws_iam_policy.multi_stack_backends_module : p.name]
-
   }
 }