Creating Role to be assumed by ELB for S3

thisisqubika · Apr 10, 2024 · 8b1e683 · 8b1e683
1 parent 5cc1cf2
commit 8b1e683
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/terraform/modules/alb_logging/main.tf b/terraform/modules/alb_logging/main.tf
@@ -115,10 +115,16 @@ data "aws_iam_policy_document" "bucket_policy" {
     # }
 
 
+    # condition {
+    #   test     = "Null"
+    #   variable = "s3:x-amz-server-side-encryption"
+    #   values   = ["true"]
+    # }
+
     condition {
-      test     = "Null"
-      variable = "s3:x-amz-server-side-encryption"
-      values   = ["true"]
+      test     = "StringEquals"
+      variable = "s3:x-amz-acl"
+      values   = ["bucket-owner-full-control"]
     }
  }
 }