fix: log_bucket deny policy (#150)

lacework · Oct 16, 2023 · 984385b · 984385b
1 parent 23bf420
commit 984385b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -182,7 +182,7 @@ data "aws_iam_policy_document" "cloudtrail_log_policy" {
 
     principals {
       type        = "AWS"
-      identifiers = ["arn:aws:iam::${data.aws_caller_identity.current.account_id}:root"]
+      identifiers = ["*"]
     }
 
     condition {