Skip to content

Commit

Permalink
fix(GROW-3004): Fix the sid issue (#166)
Browse files Browse the repository at this point in the history
Signed-off-by: Lei Jin <[email protected]>
  • Loading branch information
leijin-lw authored Dec 19, 2024
1 parent 5ac6f90 commit f43ba6d
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -273,7 +273,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
version = "2012-10-17"

statement {
sid = "Enable IAM User Permissions"
sid = "EnableIAMUserPermissions"
effect = "Allow"

principals {
Expand All @@ -288,7 +288,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
dynamic "statement" {
for_each = (!var.use_existing_cloudtrail && length(var.bucket_sse_key_arn) == 0) || var.sns_topic_encryption_enabled ? [1] : []
content {
sid = "Allow CloudTrail service to encrypt/decrypt"
sid = "AllowCloudTrailServiceToEncryptDecrypt"
effect = "Allow"

principals {
Expand All @@ -304,7 +304,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
dynamic "statement" {
for_each = var.use_s3_bucket_notification ? [1] : []
content {
sid = "Allow S3 bucket to encrypt/decrypt"
sid = "AllowS3BucketToEncryptDecrypt"
effect = "Allow"

principals {
Expand All @@ -328,7 +328,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
dynamic "statement" {
for_each = (!var.use_existing_cloudtrail && length(var.bucket_sse_key_arn) == 0) ? [1] : []
content {
sid = "Allow CloudTrail to describe key"
sid = "AllowCloudTrailToDescribeKey"
effect = "Allow"

principals {
Expand All @@ -344,7 +344,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
dynamic "statement" {
for_each = (var.sns_topic_encryption_enabled && length(var.sns_topic_encryption_key_arn) == 0) ? [1] : []
content {
sid = "Allow SNS service to encrypt/decrypt"
sid = "AllowSNSServiceToEncryptDecrypt"
effect = "Allow"

principals {
Expand All @@ -358,7 +358,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
}

statement {
sid = "Allow principals in the account to decrypt log files"
sid = "AllowPrincipalsInTheAccountToDecryptLogFiles"
effect = "Allow"

principals {
Expand Down

0 comments on commit f43ba6d

Please sign in to comment.