Skip to content

Commit cb34c8d

Browse files
committed
fix: update kms policy identifiers to use region name instead of region id
Signed-off-by: Nachiket Roy <nachiket.roy.2@gmail.com>
1 parent bce29d2 commit cb34c8d

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

infrastructure/modules/kms/main.tf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,12 +40,12 @@ data "aws_iam_policy_document" "key_policy" {
4040

4141
condition {
4242
test = "ArnLike"
43-
values = ["arn:aws:logs:${data.aws_region.current.id}:${data.aws_caller_identity.current.account_id}:log-group:*"]
43+
values = ["arn:aws:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:log-group:*"]
4444
variable = "kms:EncryptionContext:aws:logs:arn"
4545
}
4646

4747
principals {
48-
identifiers = ["logs.${data.aws_region.current.id}.amazonaws.com"]
48+
identifiers = ["logs.${data.aws_region.current.region}.amazonaws.com"]
4949
type = "Service"
5050
}
5151
}

0 commit comments

Comments
 (0)