Update sts role

phuonghuynh · phuonghuynh · commit 9343ef49daeb · 2018-11-30T16:57:04.000+07:00
diff --git a/sts_role.tf b/sts_role.tf
@@ -35,7 +35,7 @@ data "aws_iam_policy_document" "this" {
     ]
 
     resources = [
-      "*",
+      "arn:aws:logs:*:*:*"
     ]
   }
 
@@ -47,7 +47,7 @@ data "aws_iam_policy_document" "this" {
     ]
 
     resources = [
-      "*",
+      "${aws_lambda_function.this.arn}:*",
     ]
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -35,7 +35,7 @@ data "aws_iam_policy_document" "this" {`
`35`	`35`	`]`
`36`	`36`
`37`	`37`	`resources = [`
`38`		`- "*",`
	`38`	`+ "arn:aws:logs:::*"`
`39`	`39`	`]`
`40`	`40`	`}`
`41`	`41`
`@@ -47,7 +47,7 @@ data "aws_iam_policy_document" "this" {`
`47`	`47`	`]`
`48`	`48`
`49`	`49`	`resources = [`
`50`		`- "*",`
	`50`	`+ "${aws_lambda_function.this.arn}:*",`
`51`	`51`	`]`
`52`	`52`	`}`
`53`	`53`	`}`