really fix policy

NHSDigital · Sep 4, 2024 · 7cdaffe · 7cdaffe
1 parent 1203fff
commit 7cdaffe
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/SAMtemplates/tables/main.yaml b/SAMtemplates/tables/main.yaml
@@ -49,7 +49,8 @@ Resources:
               - kms:Decrypt
             Resource: "*"
             Condition:
-              ArnLike: !Sub "arn:aws:iam::${AWS::AccountId}:role/aws-reserved/sso.amazonaws.com/${AWS::Region}/AWSReservedSSO_ReadOnly*"
+              ArnLike:
+                aws:PrincipalArn: !Sub "arn:aws:iam::${AWS::AccountId}:role/aws-reserved/sso.amazonaws.com/${AWS::Region}/AWSReservedSSO_ReadOnly*"
 
   PrescriptionStatusUpdatesKMSKeyAlias:
     Type: AWS::KMS::Alias