Skip to content

Commit 6bfd999

Browse files
committed
CCM-14961: Allow cross domain bus to put event on DL bus
1 parent 0ad4f3b commit 6bfd999

1 file changed

Lines changed: 5 additions & 3 deletions

File tree

infrastructure/terraform/components/dl/cloudwatch_event_bus.tf

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,8 @@ data "aws_iam_policy_document" "main_event_bus_document" {
3434
effect = "Allow"
3535

3636
principals {
37-
type = "Service"
38-
identifiers = ["events.amazonaws.com"]
37+
type = "AWS"
38+
identifiers = ["arn:aws:iam::${var.eventbus_account_id}:root"]
3939
}
4040

4141
actions = [
@@ -49,7 +49,9 @@ data "aws_iam_policy_document" "main_event_bus_document" {
4949
condition {
5050
test = "ArnLike"
5151
variable = "aws:SourceArn"
52-
values = ["arn:aws:events:${var.region}:${var.eventbus_account_id}:rule/*-data-plane/*"]
52+
values = [
53+
"arn:aws:events:${var.region}:${var.eventbus_account_id}:rule/*-data-plane*"
54+
]
5355
}
5456
}
5557
}

0 commit comments

Comments
 (0)