PR #825 introduced new iam conditions, one uses wildcard with Like op…

…erator (#879)
aws-samples · Jul 8, 2024 · 8e72caa · 8e72caa
1 parent 5709a4f
commit 8e72caa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/terraform-modules/cur-setup-destination/main.tf b/terraform-modules/cur-setup-destination/main.tf
@@ -155,7 +155,7 @@ data "aws_iam_policy_document" "bucket_policy" {
         "${aws_s3_bucket.this.arn}/*",
       ]
       condition {
-        test     = "StringEquals"
+        test     = "StringLike"
         values   = ["arn:${data.aws_partition.this.partition}:cur:${data.aws_region.this.name}:${data.aws_caller_identity.this.account_id}:definition/*"]
         variable = "aws:SourceArn"
       }

diff --git a/terraform-modules/cur-setup-source/main.tf b/terraform-modules/cur-setup-source/main.tf
@@ -147,7 +147,7 @@ data "aws_iam_policy_document" "bucket_policy" {
       "${aws_s3_bucket.this.arn}/*",
     ]
     condition {
-      test     = "StringEquals"
+      test     = "StringLike"
       values   = ["arn:${data.aws_partition.this.partition}:cur:${data.aws_region.this.name}:${data.aws_caller_identity.this.account_id}:definition/*"]
       variable = "aws:SourceArn"
     }