NRL-1187 pull correct kms key

jackleary · jackleary · commit 9f4f5d1a2425 · 2024-12-31T16:42:49.000Z
diff --git a/terraform/infrastructure/modules/firehose/iam_firehose.tf b/terraform/infrastructure/modules/firehose/iam_firehose.tf
@@ -31,6 +31,7 @@ data "aws_iam_policy_document" "firehose" {
       aws_s3_bucket.firehose.arn,
       "${aws_s3_bucket.firehose.arn}/*",
       var.reporting_bucket_arn,
+      local.iam_firehose.reporting_s3_arn,
     ])
     effect = "Allow"
   }
diff --git a/terraform/infrastructure/modules/firehose/locals.tf b/terraform/infrastructure/modules/firehose/locals.tf
@@ -34,6 +34,7 @@ locals {
   iam_firehose = {
     cloudwatch_reporting_log_group_arn  = var.reporting_infra_toggle ? aws_cloudwatch_log_group.firehose_reporting[0].arn : null
     cloudwatch_reporting_log_stream_arn = var.reporting_infra_toggle ? aws_cloudwatch_log_stream.firehose_reporting[0].arn : null
+    reporting_s3_arn                    = var.reporting_infra_toggle ? "${var.reporting_bucket_arn}/*" : null
   }
 
   iam_subscriptions = {

Original file line number	Diff line number	Diff line change
`@@ -31,6 +31,7 @@ data "aws_iam_policy_document" "firehose" {`
`31`	`31`	`aws_s3_bucket.firehose.arn,`
`32`	`32`	`"${aws_s3_bucket.firehose.arn}/*",`
`33`	`33`	`var.reporting_bucket_arn,`
	`34`	`+ local.iam_firehose.reporting_s3_arn,`
`34`	`35`	`])`
`35`	`36`	`effect = "Allow"`
`36`	`37`	`}`
Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,7 @@ locals {`
`34`	`34`	`iam_firehose = {`
`35`	`35`	`cloudwatch_reporting_log_group_arn = var.reporting_infra_toggle ? aws_cloudwatch_log_group.firehose_reporting[0].arn : null`
`36`	`36`	`cloudwatch_reporting_log_stream_arn = var.reporting_infra_toggle ? aws_cloudwatch_log_stream.firehose_reporting[0].arn : null`
	`37`	`+ reporting_s3_arn = var.reporting_infra_toggle ? "${var.reporting_bucket_arn}/*" : null`
`37`	`38`	`}`
`38`	`39`
`39`	`40`	`iam_subscriptions = {`