Revert Resource=* first

bcgov · Aug 27, 2024 · 270e9f1 · 270e9f1
1 parent 51d08c8
commit 270e9f1
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/infrastructure/cloud/modules/security/iam.tf b/infrastructure/cloud/modules/security/iam.tf
@@ -45,7 +45,7 @@ resource "aws_iam_role_policy" "ecs_execution_policy" {
         ],
         Effect = "Allow",
         Resource = [
-          var.ecr_repository_arn
+          "*"
         ]
       },
       {
@@ -54,10 +54,8 @@ resource "aws_iam_role_policy" "ecs_execution_policy" {
           "logs:PutLogEvents",
           "logs:CreateLogGroup"
         ],
-        Effect = "Allow",
-        Resource = [
-          var.ecs_web_td_log_group_arn
-        ]
+        Effect   = "Allow",
+        Resource = "arn:aws:logs:*:*:*"
       }
     ]
   })