File tree Expand file tree Collapse file tree 1 file changed +6
-6
lines changed
Expand file tree Collapse file tree 1 file changed +6
-6
lines changed Original file line number Diff line number Diff line change @@ -42,9 +42,9 @@ locals {
4242 Effect = " Allow"
4343 Action = [" ssm:GetParameter" , " ssm:GetParametersByPath" ]
4444 Resource = [
45- " arn:aws:ssm:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_URL" ,
46- " arn:aws:ssm:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_USER_NAME" ,
47- " arn:aws:ssm:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_PASSWORD"
45+ " arn:aws:ssm:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_URL" ,
46+ " arn:aws:ssm:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_USER_NAME" ,
47+ " arn:aws:ssm:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :parameter/dev/MYSQL_PASSWORD"
4848 ]
4949 }
5050 ]
@@ -87,14 +87,14 @@ locals {
8787 Effect = " Allow" ,
8888 Action = [" ssm:GetParametersByPath" , " ssm:GetParameter" ],
8989 Resource = [
90- " arn:aws:ssm:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :parameter/dev/*" ,
91- " arn:aws:ssm:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :parameter/prod/*"
90+ " arn:aws:ssm:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :parameter/dev/*" ,
91+ " arn:aws:ssm:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :parameter/prod/*"
9292 ]
9393 },
9494 {
9595 Effect = " Allow" ,
9696 Action = " kms:Decrypt" ,
97- Resource = " arn:aws:kms:${ data . aws_region . current . name } :${ data . aws_caller_identity . current . account_id } :alias/aws/ssm"
97+ Resource = " arn:aws:kms:${ data . aws_region . current . id } :${ data . aws_caller_identity . current . account_id } :alias/aws/ssm"
9898 }
9999 ]
100100 }
You can’t perform that action at this time.
0 commit comments