add a kinesis trust relationship... even though it didn't fix the problem

soisyourface · soisyourface · commit 883cd6ac65cd · 2024-12-10T11:48:08.000-07:00
diff --git a/iam_pipes.tf b/iam_pipes.tf
@@ -338,6 +338,16 @@ data "aws_iam_policy_document" "assume_role_pipe" {
       values   = ["arn:aws:pipes:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:pipe/${each.value.Name}"]
     }
   }
+
+  statement {
+    effect  = "Allow"
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["kinesis.${data.aws_partition.current.dns_suffix}"]
+    }
+  }
 }
 
 resource "aws_iam_role" "eventbridge_pipe" {

Original file line number	Diff line number	Diff line change
`@@ -338,6 +338,16 @@ data "aws_iam_policy_document" "assume_role_pipe" {`
`338`	`338`	`values = ["arn:aws:pipes:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:pipe/${each.value.Name}"]`
`339`	`339`	`}`
`340`	`340`	`}`
	`341`	`+`
	`342`	`+ statement {`
	`343`	`+ effect = "Allow"`
	`344`	`+ actions = ["sts:AssumeRole"]`
	`345`	`+`
	`346`	`+ principals {`
	`347`	`+ type = "Service"`
	`348`	`+ identifiers = ["kinesis.${data.aws_partition.current.dns_suffix}"]`
	`349`	`+ }`
	`350`	`+ }`
`341`	`351`	`}`
`342`	`352`
`343`	`353`	`resource "aws_iam_role" "eventbridge_pipe" {`