From ad891da8b85490e1e6485eceb0bc0313df5017df Mon Sep 17 00:00:00 2001
From: Alex Youssefinia <ayoussefinia@fearless.tech>
Date: Wed, 11 Dec 2024 13:41:04 -0600
Subject: [PATCH] remove allow create role

---
 services/admin/serverless.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/services/admin/serverless.yml b/services/admin/serverless.yml
index 3bfc16503..a8c7e042c 100644
--- a/services/admin/serverless.yml
+++ b/services/admin/serverless.yml
@@ -37,11 +37,6 @@ provider:
             - arn:aws:dynamodb:*:*:table/onemac-develop-one
             - arn:aws:dynamodb:*:*:table/${self:custom.oneMacTableName}
             - arn:aws:dynamodb:*:*:table/${self:custom.oneMacTableName}/index/*
-        # Allow CreateRole for IAM actions
-        - Effect: Allow
-          Action:
-            - iam:CreateRole
-          Resource: arn:aws:iam::${AWS::AccountId}:role/*
 
   environment:
     NODE_OPTIONS: '--enable-source-maps'