CCM-8197: Cross Account Observability

jamesthompson26-nhs · jamesthompson26-nhs · commit 040b5efba686 · 2025-05-01T14:53:37.000+01:00
diff --git a/infrastructure/terraform/components/acct/iam_role_log_subscription_role.tf b/infrastructure/terraform/components/acct/iam_role_log_subscription_role.tf
@@ -30,7 +30,7 @@ resource "aws_iam_policy" "log_subscription_policy" {
           "logs:DescribeLogStreams",
           "logs:PutLogEvents"
         ]
-        Resource = "*"
+        Resource = "arn:aws:logs:${var.region}:${var.observability_account_id}:destination:nhs-notify-main-acct-firehose-logs"
       }
     ]
   })

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ resource "aws_iam_policy" "log_subscription_policy" {`
`30`	`30`	`"logs:DescribeLogStreams",`
`31`	`31`	`"logs:PutLogEvents"`
`32`	`32`	`]`
`33`		`- Resource = "*"`
	`33`	`+ Resource = "arn:aws:logs:${var.region}:${var.observability_account_id}:destination:nhs-notify-main-acct-firehose-logs"`
`34`	`34`	`}`
`35`	`35`	`]`
`36`	`36`	`})`