Update kms.tf

UKHomeOffice · Sep 9, 2024 · d2ff6f3 · d2ff6f3
1 parent 71f1f61
commit d2ff6f3
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/modules/products/static-site/kms.tf b/modules/products/static-site/kms.tf
@@ -4,6 +4,7 @@ resource "aws_kms_key" "static_site_kms" {
 }
 
 resource "aws_kms_key_policy" "static_site_kms_policy" {
+key_id = aws_kms_key.static_site_kms.id
   policy = jsonencode({
     Version = "2012-10-17"
     Id      = "static_site_kms_policy"
@@ -19,13 +20,8 @@ resource "aws_kms_key_policy" "static_site_kms_policy" {
         Principal = {
           type        = "Service"
           identifiers = ["cloudfront.amazonaws.com"]
-        }
+        },
         Resource = ["*"]
-        condition = {
-          test     = "StringEquals"
-          variable = "aws:SourceArn"
-          values   = [aws_cloudfront_distribution.static_site_distribution.arn]
-        }
       },
     ]  
    })