Merge pull request #26 from NHSDigital/CCM-7893_LambdaAtEdgePerms

aidenvaines-cgi · web-flow · commit 0299b4beafcd · 2024-12-13T14:04:41.000Z
CCM-7893 LambdaAtEdge permissions
diff --git a/infrastructure/modules/lambda/data_iam_policy_document_put_logs.tf b/infrastructure/modules/lambda/data_iam_policy_document_put_logs.tf
@@ -34,7 +34,12 @@ data "aws_iam_policy_document" "put_logs" {
           "arn:aws:logs:us-east-1:%s:log-group:/aws/lambda/%s:*",
           var.aws_account_id,
           var.function_name,
-        )
+        ),
+        format(
+          "arn:aws:logs:*:%s:log-group:/aws/lambda/*.%s:*",
+          var.aws_account_id,
+          local.csi,
+        ),
       ]
     }
   }

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,12 @@ data "aws_iam_policy_document" "put_logs" {`
`34`	`34`	`"arn:aws:logs:us-east-1:%s:log-group:/aws/lambda/%s:*",`
`35`	`35`	`var.aws_account_id,`
`36`	`36`	`var.function_name,`
`37`		`- )`
	`37`	`+ ),`
	`38`	`+ format(`
	`39`	`+ "arn:aws:logs::%s:log-group:/aws/lambda/.%s:*",`
	`40`	`+ var.aws_account_id,`
	`41`	`+ local.csi,`
	`42`	`+ ),`
`38`	`43`	`]`
`39`	`44`	`}`
`40`	`45`	`}`