fix kms decrypt permission condition (#56)

lorenzo-merici · web-flow · commit 4a6956fe1281 · 2025-04-10T15:53:19.000+02:00
diff --git a/modules/integrations/cloud-logs/main.tf b/modules/integrations/cloud-logs/main.tf
@@ -139,7 +139,7 @@ data "aws_iam_policy_document" "cloudlogs_s3_access" {
   }
 
   dynamic "statement" {
-    for_each = var.kms_key_arn != null && !local.is_cross_account ? [1] : []
+    for_each = var.kms_key_arn != null ? [1] : []
     content {
       sid = "CloudlogsKMSDecrypt"
       

Original file line number	Diff line number	Diff line change
`@@ -139,7 +139,7 @@ data "aws_iam_policy_document" "cloudlogs_s3_access" {`
`139`	`139`	`}`
`140`	`140`
`141`	`141`	`dynamic "statement" {`
`142`		`- for_each = var.kms_key_arn != null && !local.is_cross_account ? [1] : []`
	`142`	`+ for_each = var.kms_key_arn != null ? [1] : []`
`143`	`143`	`content {`
`144`	`144`	`sid = "CloudlogsKMSDecrypt"`
`145`	`145`