Revert to more permissive policy

draios · Nov 2, 2023 · cb2866c · cb2866c
1 parent 7340324
commit cb2866c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/services/cloud-logs/main.tf b/modules/services/cloud-logs/main.tf
@@ -70,8 +70,8 @@ data "aws_iam_policy_document" "cloudlogs_s3_access" {
     ]
 
     resources = [
-      "${var.bucket_arn}/AWSLogs/${var.account_id}",
-      "${var.bucket_arn}/AWSLogs/${var.account_id}/*"
+      "${var.bucket_arn}",
+      "${var.bucket_arn}/*"
     ]
   }
 }