Skip to content

Commit

Permalink
chore: update flowlogs iam service role permissions to be more restri…
Browse files Browse the repository at this point in the history
…ctive
  • Loading branch information
ryanoolala committed Jul 23, 2024
1 parent a75c042 commit 4c754b5
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion vpc-flow-logs.tf
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,6 @@ data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {
"logs:DescribeLogStreams",
]

resources = ["*"]
resources = ["${var.flow_log_cloudwatch_log_group_name_prefix}${local.flow_log_cloudwatch_log_group_name_suffix}/*"]
}
}

0 comments on commit 4c754b5

Please sign in to comment.