diff --git a/terraform/iam.tf b/terraform/iam.tf index 31fda65..855d4b7 100644 --- a/terraform/iam.tf +++ b/terraform/iam.tf @@ -134,7 +134,7 @@ resource "aws_iam_policy" "instance_boundary" { # checkov:skip=CKV_AWS_111: SSM managed policy requires Resource=* for ssmmessages and describe APIs. Firehose and S3 writes are ARN-prefixed. name = local.boundary_name path = "/tf-managed/" - description = "Per-workload permissions boundary for syslog-server EC2 and Firehose (PLAT-206)." + description = "Per-workload EC2 permissions boundary for syslog-server (PLAT-78)." policy = data.aws_iam_policy_document.instance_boundary.json }