From 7ad4e112dc459a394311d33e5da3a0a8245c8d14 Mon Sep 17 00:00:00 2001 From: Scott Schreckengaust Date: Fri, 8 Nov 2024 14:13:26 -0800 Subject: [PATCH] fix: managed_policy_arns deprecated Signed-off-by: Scott Schreckengaust --- modules/document-ingestion/iam.tf | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/modules/document-ingestion/iam.tf b/modules/document-ingestion/iam.tf index 5993ec9..160bf5d 100644 --- a/modules/document-ingestion/iam.tf +++ b/modules/document-ingestion/iam.tf @@ -41,12 +41,15 @@ resource "aws_iam_role" "ingestion_api_datasource" { }] }) - managed_policy_arns = [ + tags = local.combined_tags +} + +resource "aws_iam_role_policy_attachments_exclusive" "ingestion_api_datasource" { + role_name = aws_iam_role.ingestion_api_datasource.name + policy_arns = [ "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole", "arn:aws:iam::aws:policy/AmazonEventBridgeFullAccess", ] - - tags = local.combined_tags } resource "aws_iam_role_policy" "ingestion_api_datasource" {