Feature/firehose prefix (#50)

* prefixのリバイス * IAMの修正
XxxKMSxxX · Jul 28, 2024 · 35bde77 · 35bde77
1 parent 81a1976
commit 35bde77
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/modules/firehose/main.tf b/modules/firehose/main.tf
@@ -225,7 +225,11 @@ resource "aws_iam_role_policy" "firehose_policy" {
           "glue:GetDatabases",
           "glue:UpdateDatabase"
         ],
-        Resource = "arn:aws:glue:${var.aws_region}:${data.aws_caller_identity.current.account_id}:catalog"
+        Resource = [
+          "arn:aws:glue:${var.aws_region}:${data.aws_caller_identity.current.account_id}:catalog",
+          "arn:aws:glue:${var.aws_region}:${data.aws_caller_identity.current.account_id}:database/${aws_glue_catalog_database.my_database.name}",
+          "arn:aws:glue:${var.aws_region}:${data.aws_caller_identity.current.account_id}:table/${aws_glue_catalog_table.my_table.name}"
+        ]
       },
       {
         Effect = "Allow",