Merge pull request #450 from mdr-engineering/feature/ftd_MSOCI-2192_Remove_dps_portal_IAM_user

Removes the dps_portal user and SES keys

base/mailrelay/ses.tf

@@ -40,41 +40,6 @@ output "ses_user_smtp_password" {
 }
 
 
-# dps_portal
-resource "aws_iam_access_key" "dps_portal_key-v2" {
-  user     = aws_iam_user.dps_portal.name
-  provider = aws.ses
-}
-
-resource "aws_iam_access_key" "dps_portal_key-v3" {
-  user     = aws_iam_user.dps_portal.name
-  provider = aws.ses
-}
-
-# This just muddies the output, but is good for troubleshooting, so I'm just
-# commenting it out.
-#output dps_portal_access_keys {
-#  value = {
-#    "current" = {
-#      "aws_access_key_id": aws_iam_access_key.dps_portal_key-v1.id
-#      "aws_secret_access_key": aws_iam_access_key.dps_portal_key-v1.secret
-#    },
-#    "previous" = {
-#      "aws_access_key_id": aws_iam_access_key.dps_portal_key-v0.id
-#      "aws_secret_access_key": aws_iam_access_key.dps_portal_key-v0.secret
-#    }
-#  }
-#}
-
-output "dps_portal_smtp_username" {
-  value = aws_iam_access_key.dps_portal_key-v3.id
-}
-
-output "dps_portal_smtp_password" {
-  value     = aws_iam_access_key.dps_portal_key-v3.ses_smtp_password_v4
-  sensitive = true
-}
-
 ######################
 # SES Domain
 
@@ -181,34 +146,6 @@ resource "aws_iam_user_policy" "ses_user" {
 EOF
 }
 
-#-----------------------------------------------
-# IAM user for smtp auth for dps-portal
-#-----------------------------------------------
-resource "aws_iam_user" "dps_portal" {
-  name = "dps_portal"
-  path = "/service_accounts/"
-}
-
-resource "aws_iam_user_policy" "dps_portal" {
-  name = "dps_portal_policy"
-  user = aws_iam_user.dps_portal.name
-
-  policy = <<EOF
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Action": [
-        "ses:SendRawEmail"
-      ],
-      "Effect": "Allow",
-      "Resource": "*"
-    }
-  ]
-}
-EOF
-}
-
 #------------------------------------
 # SNS topic for bounce notifications
 #------------------------------------
@@ -230,19 +167,3 @@ resource "aws_ses_identity_notification_topic" "complaint_notification" {
   identity          = aws_ses_domain_identity.public.domain
   provider          = aws.ses
 }
-#-----------------------------------------------
-# For DPS portal, needs SES connectivity
-#-----------------------------------------------
-#module "ses_user_for_portal" {
-#  source = "../modules/ses_iam_account"
-#  username = "dps_portal"
-#  pgp_key  = "${path.module}/../../common/duane_waddle.pgp"
-#}
-#
-#output portal_ses_username {
-#  value = "${module.ses_user_for_portal.username}"
-#}
-#
-#output portal_ses_password {
-#  value = "${module.ses_user_for_portal.password}"
-#}