fix: bucket notification not having permission to send messages to queue

custom-terraform-aws-modules · Mar 21, 2024 · 86d9d1f · 86d9d1f
1 parent 4c86347
commit 86d9d1f
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/main.tf b/main.tf
@@ -73,9 +73,10 @@ data "aws_iam_policy_document" "fanout" {
   statement {
     effect = "Allow"
 
+    # this can not be sns.amazonaws.com specific
     principals {
-      type        = "Service"
-      identifiers = ["sns.amazonaws.com"]
+      type        = "*"
+      identifiers = ["*"]
     }
 
     actions   = ["sqs:SendMessage"]
@@ -109,9 +110,10 @@ data "aws_iam_policy_document" "queue" {
   statement {
     effect = "Allow"
 
+    # this can not be sqs.amazonaws.com specific
     principals {
-      type        = "Service"
-      identifiers = ["sqs.amazonaws.com"]
+      type        = "*"
+      identifiers = ["*"]
     }
 
     actions = ["sqs:SendMessage"]