Allow permissions inside td log groups

bcgov · Aug 29, 2024 · 0c9c9c0 · 0c9c9c0
1 parent dcfe229
commit 0c9c9c0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/infrastructure/cloud/modules/security/iam.tf b/infrastructure/cloud/modules/security/iam.tf
@@ -56,8 +56,8 @@ resource "aws_iam_role_policy" "ecs_execution_policy" {
         ],
         Effect = "Allow",
         Resource = [
-          var.ecs_web_td_log_group_arn,
-          var.ecs_api_td_log_group_arn
+          "${var.ecs_web_td_log_group_arn}:*",
+          "${var.ecs_api_td_log_group_arn}:*"
         ]
       }
     ]