fix: dynamic partition instead of hard-coded "aws"

alanivey · alanivey · commit d5d947cf4830 · 2025-11-24T12:15:45.000-05:00
diff --git a/main.tf b/main.tf
@@ -909,7 +909,7 @@ data "aws_iam_policy_document" "waf_log_delivery" {
 
     condition {
       test     = "ArnLike"
-      values   = ["arn:aws:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]
+      values   = ["arn:${data.aws_partition.current.partition}:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]
       variable = "aws:SourceArn"
     }
   }
@@ -940,7 +940,7 @@ data "aws_iam_policy_document" "waf_log_delivery" {
 
     condition {
       test     = "ArnLike"
-      values   = ["arn:aws:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]
+      values   = ["arn:${data.aws_partition.current.partition}:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]
       variable = "aws:SourceArn"
     }
   }

Original file line number	Diff line number	Diff line change
`@@ -909,7 +909,7 @@ data "aws_iam_policy_document" "waf_log_delivery" {`
`909`	`909`
`910`	`910`	`condition {`
`911`	`911`	`test = "ArnLike"`
`912`		`- values = ["arn:aws:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]`
	`912`	`+ values = ["arn:${data.aws_partition.current.partition}:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]`
`913`	`913`	`variable = "aws:SourceArn"`
`914`	`914`	`}`
`915`	`915`	`}`
`@@ -940,7 +940,7 @@ data "aws_iam_policy_document" "waf_log_delivery" {`
`940`	`940`
`941`	`941`	`condition {`
`942`	`942`	`test = "ArnLike"`
`943`		`- values = ["arn:aws:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]`
	`943`	`+ values = ["arn:${data.aws_partition.current.partition}:logs:${data.aws_region.current.region}:${data.aws_caller_identity.current.id}:*"]`
`944`	`944`	`variable = "aws:SourceArn"`
`945`	`945`	`}`
`946`	`946`	`}`