mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-01-16 08:37:18 +01:00
fix: Replace Karpenter SQS policy dynamic service princpal DNS suffixes with static amazonaws.com (#2941)
fix: Replace dynamic service princpal DNS suffixes with static `amazonaws.com`
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
repos:
|
||||
- repo: https://github.com/antonbabenko/pre-commit-terraform
|
||||
rev: v1.86.0
|
||||
rev: v1.87.1
|
||||
hooks:
|
||||
- id: terraform_fmt
|
||||
- id: terraform_validate
|
||||
|
||||
@@ -4,7 +4,6 @@ data "aws_caller_identity" "current" {}
|
||||
|
||||
locals {
|
||||
account_id = data.aws_caller_identity.current.account_id
|
||||
dns_suffix = data.aws_partition.current.dns_suffix
|
||||
partition = data.aws_partition.current.partition
|
||||
region = data.aws_region.current.name
|
||||
}
|
||||
@@ -445,8 +444,8 @@ data "aws_iam_policy_document" "queue" {
|
||||
principals {
|
||||
type = "Service"
|
||||
identifiers = [
|
||||
"events.${local.dns_suffix}",
|
||||
"sqs.${local.dns_suffix}",
|
||||
"events.amazonaws.com",
|
||||
"sqs.amazonaws.com",
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user