xpk/terraform.examples
SHA256
1
0
Fork 0
Code Pull Requests Activity

feat: updated key policy for storage

Browse Source
This commit is contained in:
xpk
2026-02-26 08:35:04 +08:00
parent 0e0cea1174
commit 7c3ba0aab8
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/security_identity_compliance/CustomerManagedKmsKeys/main.tf
+7 -7
View File
@@ -219,10 +219,10 @@ data "aws_iam_policy_document" "storage" {
] ]
resources = ["*"] resources = ["*"]
condition { condition {
test = "StringEquals" test = "StringLike"
values = [ values = [
"ec2.${data.aws_region.this.id}.amazonaws.com", "ec2.*.amazonaws.com",
"s3.${data.aws_region.this.id}.amazonaws.com" "s3.*.amazonaws.com"
] ]
variable = "kms:ViaService" variable = "kms:ViaService"
} }
@@ -284,11 +284,11 @@ data "aws_iam_policy_document" "rds" {
] ]
resources = ["*"] resources = ["*"]
condition { condition {
test = "StringEquals" test = "StringLike"
values = [ values = [
"rds.${data.aws_region.this.id}.amazonaws.com", "rds.*.amazonaws.com",
"elasticache.${data.aws_region.this.id}.amazonaws.com", "elasticache.*.amazonaws.com",
"dax.${data.aws_region.this.id}.amazonaws.com" "dax.*.amazonaws.com"
] ]
variable = "kms:ViaService" variable = "kms:ViaService"
} }