From f021b238fc03d3ec85fd398c1265b6dc0005b44d Mon Sep 17 00:00:00 2001
From: Feraudet Cyril <cyril@feraudet.com>
Date: Mon, 17 Oct 2022 10:21:02 +0200
Subject: [PATCH] Fix/secrets policies (#74)

---
 policies.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policies.tf b/policies.tf
index 4ff4f89..7084195 100644
--- a/policies.tf
+++ b/policies.tf
@@ -91,7 +91,7 @@ data "aws_iam_policy_document" "task_container_secrets" {
 
     resources = concat(
       [data.aws_kms_key.task_container_secrets_key.arn],
-      [for i in var.task_container_secrets : i["valueFrom"]]
+      [for i in var.task_container_secrets : replace(i["valueFrom"], "/:[^:]+::$/", "")]
     )
     actions = [
       "secretsmanager:GetSecretValue",