fix: FluenBit add-on CW Log group fix (#228)

aws-ia · Aug 11, 2023 · 1f4b8c4 · 1f4b8c4
1 parent bd1df9c
commit 1f4b8c4
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -591,7 +591,7 @@ data "aws_iam_policy_document" "aws_for_fluentbit" {
       sid    = "CreateCWLogs"
       effect = "Allow"
       resources = [
-        "arn:${local.partition}:logs:${local.region}:${local.account_id}:log-group:${try(var.aws_for_fluentbit_cw_log_group.name, "*")}",
+        "arn:${local.partition}:logs:${local.region}:${local.account_id}:log-group:${try(var.aws_for_fluentbit_cw_log_group.name, "*")}:*",
       ]
 
       actions = [
@@ -675,6 +675,18 @@ module "aws_for_fluentbit" {
       name  = "cloudWatch.region"
       value = local.region
     },
+    {
+      name  = "cloudWatchLogs.logGroupName"
+      value = local.aws_for_fluentbit_cw_log_group_name
+    },
+    {
+      name  = "cloudWatchLogs.logGroupTemplate"
+      value = ""
+    },
+    {
+      name  = "cloudWatchLogs.autoCreateGroup"
+      value = false
+    },
     {
       name  = "cloudWatchLogs.region"
       value = local.region