Fixed policy format

bcgov · Nov 15, 2024 · fc1e0da · fc1e0da
1 parent 51dc948
commit fc1e0da
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/infrastructure/cloud/modules/APIGateway/main.tf b/infrastructure/cloud/modules/APIGateway/main.tf
@@ -64,10 +64,12 @@ resource "aws_api_gateway_rest_api_policy" "apigw_rest_api_policy" {
     Version = "2012-10-17"
     Statement = [
       {
-        Effect    = "Allow"
-        Principal = var.ecs_execution_role_arn
-        Action    = "execute-api:Invoke"
-        Resource  = "arn:aws:execute-api:${var.region}:${var.account_id}:${aws_api_gateway_rest_api.apigw.id}/*"
+        Effect = "Allow"
+        Principal = {
+          AWS = var.ecs_execution_role_arn
+        }
+        Action   = "execute-api:Invoke"
+        Resource = "arn:aws:execute-api:${var.region}:${var.account_id}:${aws_api_gateway_rest_api.apigw.id}/*"
       }
     ]
   })