fix: Update CloudWatch log group creation deny policy to use wildcard (#2267)

Zvikan · bryantbiggs · web-flow · commit ac4d549629aa · 2022-10-11T16:28:06.000-04:00
Co-authored-by: Bryant Biggs &lt;bryantbiggs@gmail.com&gt;
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.75.0
+    rev: v1.76.0
     hooks:
       - id: terraform_fmt
       - id: terraform_validate
diff --git a/main.tf b/main.tf
@@ -279,7 +279,7 @@ resource "aws_iam_role" "this" {
           {
             Action   = ["logs:CreateLogGroup"]
             Effect   = "Deny"
-            Resource = aws_cloudwatch_log_group.this[0].arn
+            Resource = "*"
           },
         ]
       })

Original file line number	Diff line number	Diff line change
`@@ -279,7 +279,7 @@ resource "aws_iam_role" "this" {`
`279`	`279`	`{`
`280`	`280`	`Action = ["logs:CreateLogGroup"]`
`281`	`281`	`Effect = "Deny"`
`282`		`- Resource = aws_cloudwatch_log_group.this[0].arn`
	`282`	`+ Resource = "*"`
`283`	`283`	`},`
`284`	`284`	`]`
`285`	`285`	`})`