Skip to content

Commit be8e740

Browse files
rename sid (#2167)
formatting
1 parent 002f5cb commit be8e740

File tree

1 file changed

+10
-12
lines changed

1 file changed

+10
-12
lines changed

terraform/modules/qlik-sense-server/04-aws-s3-alb-logs.tf

Lines changed: 10 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -117,24 +117,22 @@ data "aws_iam_policy_document" "write_access_for_aws_loggers" {
117117
}
118118

119119
statement {
120-
sid = "HTTPSOnly"
121-
effect = "Deny"
122-
123-
resources = [aws_s3_bucket.qlik_alb_logs[0].arn,
124-
"${aws_s3_bucket.qlik_alb_logs[0].arn}/*"]
125-
120+
sid = "AllowSSLRequestsOnly"
121+
effect = "Deny"
126122
actions = ["s3:*"]
127-
123+
principals {
124+
type = "AWS"
125+
identifiers = ["*"]
126+
}
127+
resources = [
128+
aws_s3_bucket.qlik_alb_logs[0].arn,
129+
"${aws_s3_bucket.qlik_alb_logs[0].arn}/*"
130+
]
128131
condition {
129132
test = "Bool"
130133
variable = "aws:SecureTransport"
131134
values = ["false"]
132135
}
133-
134-
principals {
135-
type = "AWS"
136-
identifiers = ["*"]
137-
}
138136
}
139137
}
140138

0 commit comments

Comments
 (0)