Add ecs web td log group arn back

bcgov · Aug 27, 2024 · 6239189 · 6239189
1 parent 74bbe4a
commit 6239189
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/infrastructure/cloud/modules/security/iam.tf b/infrastructure/cloud/modules/security/iam.tf
@@ -54,8 +54,10 @@ resource "aws_iam_role_policy" "ecs_execution_policy" {
           "logs:PutLogEvents",
           "logs:CreateLogGroup"
         ],
-        Effect   = "Allow",
-        Resource = "arn:aws:logs:*:*:*"
+        Effect = "Allow",
+        Resource = [
+          var.ecs_web_td_log_group_arn
+        ]
       }
     ]
   })