Use string instead of array for S3 policy’s Action

Due to a Terraform bug (hashicorp/terraform#4948), if Action is set to a single-element array, the S3 policy always reports that it needs to be modified in place. The workaround is to use a string.
tablexi · May 16, 2018 · ae243fb · ae243fb
1 parent 2afc8de
commit ae243fb
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/aws/application_load_balancer/load_balancer/main.tf b/aws/application_load_balancer/load_balancer/main.tf
@@ -70,9 +70,7 @@ resource "aws_s3_bucket_policy" "load_balancer_access_logs" {
  "Version": "2012-10-17",
  "Statement": [
  {
- "Action": [
- "s3:PutObject"
- ],
+ "Action": "s3:PutObject",
  "Effect": "Allow",
  "Resource": "${aws_s3_bucket.load_balancer_access_logs.arn}/AWSLogs/${data.aws_caller_identity.aws_account.account_id}/*",
  "Principal": {