File tree Expand file tree Collapse file tree 1 file changed +4
-3
lines changed
Expand file tree Collapse file tree 1 file changed +4
-3
lines changed Original file line number Diff line number Diff line change @@ -79,23 +79,24 @@ resource "aws_lambda_permission" "ssm_housekeeper" {
7979}
8080
8181resource "aws_iam_role" "ssm_housekeeper" {
82- name = " ${ var . prefix } -action-ssm-housekeeper-lambda-role"
82+ name = " ${ var . prefix } -ssm-hk-lambda"
83+ description = " Lambda role for SSM Housekeeper (${ var . prefix } )"
8384 assume_role_policy = data. aws_iam_policy_document . lambda_assume_role_policy . json
8485 path = local. role_path
8586 permissions_boundary = var. role_permissions_boundary
8687 tags = local. tags
8788}
8889
8990resource "aws_iam_role_policy" "ssm_housekeeper" {
90- name = " ${ var . prefix } -ssm-housekeeper-policy "
91+ name = " lambda -ssm"
9192 role = aws_iam_role. ssm_housekeeper . name
9293 policy = templatefile (" ${ path . module } /policies/lambda-ssm-housekeeper.json" , {
9394 ssm_token_path = " arn:${ var . aws_partition } :ssm:${ var . aws_region } :${ data . aws_caller_identity . current . account_id } :parameter${ local . token_path } "
9495 })
9596}
9697
9798resource "aws_iam_role_policy" "ssm_housekeeper_logging" {
98- name = " ${ var . prefix } - lambda-logging"
99+ name = " lambda-logging"
99100 role = aws_iam_role. ssm_housekeeper . name
100101 policy = templatefile (" ${ path . module } /policies/lambda-cloudwatch.json" , {
101102 log_group_arn = aws_cloudwatch_log_group.ssm_housekeeper.arn
You can’t perform that action at this time.
0 commit comments