Taking out the cbs_principal_arn since it was deleted (#509)

Author: sylviamclaughlin

.github/workflows/terragrunt-apply-central.yml

@@ -18,7 +18,6 @@ env:
   TERRAFORM_VERSION: 1.1.4
   TERRAGRUNT_VERSION: 0.36.0
   TF_INPUT: false
-  TF_VAR_cbs_principal_arn: ${{ secrets.CBS_PRINCIPAL_ARN }}
   TF_VAR_cbs_principal_role_arn: ${{ secrets.CBS_PRINCIPAL_ROLE_ARN }}
   TF_VAR_cbs_destination_event_bus_arn: ${{ secrets.CBS_DESTINATION_EVENT_BUS_ARN}}
   TF_VAR_slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_CBS }}

.github/workflows/terragrunt-plan-central.yml

@@ -17,7 +17,6 @@ env:
   TERRAFORM_VERSION: 1.1.4
   TERRAGRUNT_VERSION: 0.36.0
   TF_INPUT: false
-  TF_VAR_cbs_principal_arn: ${{ secrets.CBS_PRINCIPAL_ARN }}
   TF_VAR_cbs_principal_role_arn: ${{ secrets.CBS_PRINCIPAL_ROLE_ARN }}
   TF_VAR_cbs_destination_event_bus_arn: ${{ secrets.CBS_DESTINATION_EVENT_BUS_ARN}}
   TF_VAR_slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_CBS }}

terragrunt/aws/central_account/iam.tf

@@ -12,7 +12,7 @@ data "aws_iam_policy_document" "log_archive_read_assume" {
     actions = ["sts:AssumeRole"]
     principals {
       type        = "AWS"
-      identifiers = [var.cbs_principal_arn, var.cbs_principal_role_arn]
+      identifiers = [var.cbs_principal_role_arn]
     }
   }
 }

terragrunt/aws/central_account/inputs.tf

@@ -1,9 +1,3 @@
-variable "cbs_principal_arn" {
-  description = "ARN of the CBS principal that reads objects from the log archive bucket"
-  type        = string
-  sensitive   = true
-}
-
 variable "cbs_principal_role_arn" {
   description = "ARN of the CBS principal role that reads objects from the log archive bucket (used upon decommissioning of CBS v1.0)"
   type        = string

terragrunt/aws/central_account/kms.tf

@@ -28,7 +28,7 @@ data "aws_iam_policy_document" "log_archive_encrypt" {
     resources = ["*"]
     principals {
       type        = "AWS"
-      identifiers = [var.cbs_principal_arn, var.cbs_principal_role_arn]
+      identifiers = [var.cbs_principal_role_arn]
     }
   }