fix: Correction with IAM role policy associated with modules/flow-log (#1264)

Balvinder-1995 · balvinder · web-flow · commit de1370094ac0 · 2025-11-17T08:33:44.000-06:00
Co-authored-by: balvinder &lt;no-email@noemail.com&gt;
diff --git a/modules/flow-log/main.tf b/modules/flow-log/main.tf
@@ -257,7 +257,7 @@ data "aws_iam_policy_document" "this" {
         "logs:DescribeLogStreams",
       ]
 
-      resources = local.create_cloudwatch_log_group ? aws_cloudwatch_log_group.this[*].arn : [var.log_destination]
+      resources = local.create_cloudwatch_log_group ? formatlist("%s:*", aws_cloudwatch_log_group.this[*].arn) : [var.log_destination]
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -257,7 +257,7 @@ data "aws_iam_policy_document" "this" {`
`257`	`257`	`"logs:DescribeLogStreams",`
`258`	`258`	`]`
`259`	`259`
`260`		`- resources = local.create_cloudwatch_log_group ? aws_cloudwatch_log_group.this[*].arn : [var.log_destination]`
	`260`	`+ resources = local.create_cloudwatch_log_group ? formatlist("%s:", aws_cloudwatch_log_group.this[].arn) : [var.log_destination]`
`261`	`261`	`}`
`262`	`262`	`}`
`263`	`263`