Remove s3:DeleteObject* permissions from EventEmitter
No service that adds objects to an EventEmitter ever needs to
delete any object.
@@ -90,10 +90,6 @@ class EventEmitter(pulumi.ComponentResource):
{
"Effect": "Allow",
"Action": [
- "s3:DeleteObject",
- "s3:DeleteObjectTagging",
- "s3:DeleteObjectVersion",
- "s3:DeleteObjectVersionTagging",
"s3:PutObject",
"s3:PutObjectAcl",
"s3:PutObjectLegalHold",
