Merge pull request #103 from dxw/fix-kms-key-policy-draining-lambda-l…

…og-group Fix KMS key policy (draining lambda log group name)
dxw · Jun 7, 2024 · 75dd5a1 · 75dd5a1
2 parents 4a5bc7b + 0106231
commit 75dd5a1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kms-infrastructure.tf b/kms-infrastructure.tf
@@ -22,7 +22,7 @@ resource "aws_kms_key" "infrastructure" {
       )}${local.infrastructure_ecs_cluster_draining_lambda_enabled && local.infrastructure_kms_encryption ? "," : ""}
       ${templatefile("${path.root}/policies/kms-key-policy-statements/cloudwatch-logs-allow.json.tpl",
       {
-        log_group_arn = local.infrastructure_ecs_cluster_draining_lambda_enabled && local.infrastructure_kms_encryption ? "arn:aws:logs:${local.aws_region}:${local.aws_account_id}:log-group:/aws/lambda/${local.resource_prefix}-ecs-cluster-infrastructure-draining" : ""
+        log_group_arn = local.infrastructure_ecs_cluster_draining_lambda_enabled && local.infrastructure_kms_encryption ? "arn:aws:logs:${local.aws_region}:${local.aws_account_id}:log-group:/aws/lambda/${local.resource_prefix_hash}-ecs-cluster-infrastructure-draining" : ""
       }
       )}${length(local.infrastructure_ecs_cluster_services) > 0 && local.infrastructure_kms_encryption ? "," : ""}
       ${templatefile("${path.root}/policies/kms-key-policy-statements/cloudwatch-logs-allow.json.tpl",