Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Update flow log ARNs to use partition from aws_partition data source #1112

Merged
merged 1 commit into from
Aug 9, 2024

Conversation

pjaudiomv
Copy link
Contributor

@pjaudiomv pjaudiomv commented Aug 9, 2024

… ensuring compatibility with AWS GovCloud and other partitions

Description

Update flow log ARNs to use partition from aws_partition data source, ensuring compatibility with AWS GovCloud and other partitions. This was due to the least privilege change in 5.12.0, 5.11.0 and earlier are fine. See PR #1088

Motivation and Context

Currently when deploying to GovCloud with flow logs you get the following error

MalformedPolicyDocument: Partition "aws" is not valid for resource "arn:aws:logs:us-gov-west-1:0123456789:log-group:/aws/vpc-flow-log/vpc-012345:*"

Breaking Changes

No

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request

… ensuring compatibility with AWS GovCloud and other partitions

tfdocs
@pjaudiomv pjaudiomv changed the title Update flow log ARNs to use partition from aws_partition data source,… fix: Update flow log ARNs to use partition from aws_partition data source Aug 9, 2024
@bryantbiggs bryantbiggs merged commit 72cde38 into terraform-aws-modules:master Aug 9, 2024
21 of 22 checks passed
antonbabenko pushed a commit that referenced this pull request Aug 9, 2024
## [5.12.1](v5.12.0...v5.12.1) (2024-08-09)

### Bug Fixes

* Update flow log ARNs to use partition from aws_partition data source ([#1112](#1112)) ([72cde38](72cde38))
@antonbabenko
Copy link
Member

This PR is included in version 5.12.1 🎉

@pjaudiomv
Copy link
Contributor Author

Thank you for quick review and release

Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 10, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants