Merge pull request #87 from kitware-resonant/arn-reference

Use a simpler variable, now that "aws_s3_bucket" resources are split
kitware-resonant · Nov 21, 2024 · 54daa53 · 54daa53
2 parents e5ca86e + dd3c93c
commit 54daa53
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/modules/storage/main.tf b/modules/storage/main.tf
@@ -111,11 +111,8 @@ data "aws_iam_policy_document" "storage_bucket" {
       identifiers = ["*"]
       type        = "*"
     }
-    resources = [
-      # To prevent a circular reference, can't use "aws_s3_bucket.storage.arn" here
-      "arn:aws:s3:::${var.bucket_name}/*"
-    ]
-    actions = ["s3:PutObject"]
+    resources = ["${aws_s3_bucket.storage.arn}/*"]
+    actions   = ["s3:PutObject"]
 
     # Both conditions must pass to trigger a deny
     condition {