Skip to content

Commit a771956

Browse files
authored
Fix: [AEA-0000] - enable audit logging of cpt ui content bucket (#1575)
## Summary - Routine Change ### Details - enable audit logging of cpt ui content bucket
1 parent 8ffe47e commit a771956

1 file changed

Lines changed: 12 additions & 13 deletions

File tree

cloudformation/account_resources.yml

Lines changed: 12 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -472,19 +472,18 @@ Resources:
472472
aws:SourceAccount: !Ref "AWS::AccountId"
473473
ArnLike:
474474
aws:SourceArn: !GetAtt TrustStoreBucket.Arn
475-
# add this in once cpt-ui gets released to all environments
476-
# - Effect: Allow
477-
# Principal:
478-
# Service: logging.s3.amazonaws.com
479-
# Action:
480-
# - s3:PutObject*
481-
# Resource:
482-
# - !Join ["", [!GetAtt AuditLoggingBucket.Arn, "/static-content/*"]]
483-
# Condition:
484-
# StringEquals:
485-
# aws:SourceAccount: !Ref "AWS::AccountId"
486-
# ArnLike:
487-
# aws:SourceArn: !ImportValue "cpt-ui-shared-resources:StaticContentBucket:Arn"
475+
- Effect: Allow
476+
Principal:
477+
Service: logging.s3.amazonaws.com
478+
Action:
479+
- s3:PutObject*
480+
Resource:
481+
- !Join ["", [!GetAtt AuditLoggingBucket.Arn, "/static-content/*"]]
482+
Condition:
483+
StringEquals:
484+
aws:SourceAccount: !Ref "AWS::AccountId"
485+
ArnLike:
486+
aws:SourceArn: !ImportValue "cpt-ui-stateful-resources:StaticContentBucket:Arn"
488487
#endregion
489488

490489
ALBLoggingBucket:

0 commit comments

Comments
 (0)