fix: Update CloudWatch log group creation deny policy to use wildcard (…

…#2267) Co-authored-by: Bryant Biggs <[email protected]>
terraform-aws-modules · Oct 11, 2022 · ac4d549 · ac4d549
1 parent 7f90184
commit ac4d549
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.75.0
+    rev: v1.76.0
     hooks:
       - id: terraform_fmt
       - id: terraform_validate

diff --git a/main.tf b/main.tf
@@ -279,7 +279,7 @@ resource "aws_iam_role" "this" {
           {
             Action   = ["logs:CreateLogGroup"]
             Effect   = "Deny"
-            Resource = aws_cloudwatch_log_group.this[0].arn
+            Resource = "*"
           },
         ]
       })