trimmed s3 bucket permission reference

truefoundry · Aug 20, 2024 · 2adf0c3 · 2adf0c3
1 parent ebff85c
commit 2adf0c3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/bucket.tf b/bucket.tf
@@ -7,7 +7,7 @@ data "aws_iam_policy_document" "truefoundry_bucket_policy" {
     ]
 
     resources = concat(
-      ["arn:aws:s3:::${local.truefoundry_unique_name}*"],
+      ["arn:aws:s3:::${local.truefoundry_trimmed_unique_name}*"],
       var.truefoundry_artifact_buckets_will_read,
     )
   }
@@ -34,7 +34,7 @@ data "aws_iam_policy_document" "truefoundry_bucket_policy" {
       "s3:DeleteObject",
     ]
     resources = [
-      for bucket in concat(["arn:aws:s3:::${local.truefoundry_unique_name}*"], var.truefoundry_artifact_buckets_will_read) :
+      for bucket in concat(["arn:aws:s3:::${local.truefoundry_trimmed_unique_name}*"], var.truefoundry_artifact_buckets_will_read) :
       "${bucket}/*"
     ]
   }

diff --git a/locals.tf b/locals.tf
@@ -1,6 +1,7 @@
 locals {
 
   truefoundry_unique_name = var.truefoundry_s3_enable_override ? var.truefoundry_s3_override_name : "${var.cluster_name}-truefoundry"
+  truefoundry_trimmed_unique_name = trimsuffix(substr(local.truefoundry_unique_name, 0, 37), "-")
 
   truefoundry_db_unique_name = var.truefoundry_db_enable_override ? var.truefoundry_db_override_name : "${var.cluster_name}-db"