From 00687671a8a54b2bf5fa2a8fd3534312904f4240 Mon Sep 17 00:00:00 2001
From: Paolo Polidori <paolo.polidori@sysdig.com>
Date: Tue, 27 May 2025 17:32:14 +0200
Subject: [PATCH] fix(cloud-logs): syntax error being addressed

---
 modules/integrations/cloud-logs/main.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/integrations/cloud-logs/main.tf b/modules/integrations/cloud-logs/main.tf
index 3a29bcb..1c90071 100644
--- a/modules/integrations/cloud-logs/main.tf
+++ b/modules/integrations/cloud-logs/main.tf
@@ -115,6 +115,7 @@ resource "aws_iam_role" "cloudlogs_s3_access" {
   lifecycle {
     precondition {
       condition   = var.role_arn == null || split(":", var.role_arn)[4] == local.bucket_account_id  
+      error_message = "Role and Bucket must be in the same account. Check that the Role ARN is in the Bucket account ID."
     }
   }
 }