update APIGW permission to targetted rest api id

tymnicholas · web-flow · commit 9fac559b5ba9 · 2024-09-23T16:06:34.000+08:00
diff --git a/data.tf b/data.tf
@@ -43,9 +43,7 @@ data "aws_iam_policy_document" "update_lambda" {
         "apigateway:POST",
         "apigateway:PUT",
       ]
-      resources = [
-        var.apigw_arn,
-      ]
+      resources = ["arn:aws:apigateway:${data.aws_region.current.name}::/restapis/${var.apigw_id}/*"]
     }
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -43,9 +43,7 @@ data "aws_iam_policy_document" "update_lambda" {`
`43`	`43`	`"apigateway:POST",`
`44`	`44`	`"apigateway:PUT",`
`45`	`45`	`]`
`46`		`- resources = [`
`47`		`- var.apigw_arn,`
`48`		`- ]`
	`46`	`+ resources = ["arn:aws:apigateway:${data.aws_region.current.name}::/restapis/${var.apigw_id}/*"]`
`49`	`47`	`}`
`50`	`48`	`}`
`51`	`49`	`}`