This repository was archived by the owner on Jan 16, 2025. It is now read-only.
File tree 1 file changed +4
-3
lines changed
1 file changed +4
-3
lines changed Original file line number Diff line number Diff line change @@ -79,23 +79,24 @@ resource "aws_lambda_permission" "ssm_housekeeper" {
79
79
}
80
80
81
81
resource "aws_iam_role" "ssm_housekeeper" {
82
- name = " ${ var . prefix } -action-ssm-housekeeper-lambda-role"
82
+ name = " ${ var . prefix } -ssm-hk-lambda"
83
+ description = " Lambda role for SSM Housekeeper (${ var . prefix } )"
83
84
assume_role_policy = data. aws_iam_policy_document . lambda_assume_role_policy . json
84
85
path = local. role_path
85
86
permissions_boundary = var. role_permissions_boundary
86
87
tags = local. tags
87
88
}
88
89
89
90
resource "aws_iam_role_policy" "ssm_housekeeper" {
90
- name = " ${ var . prefix } -ssm-housekeeper-policy "
91
+ name = " lambda -ssm"
91
92
role = aws_iam_role. ssm_housekeeper . name
92
93
policy = templatefile (" ${ path . module } /policies/lambda-ssm-housekeeper.json" , {
93
94
ssm_token_path = " arn:${ var . aws_partition } :ssm:${ var . aws_region } :${ data . aws_caller_identity . current . account_id } :parameter${ local . token_path } "
94
95
})
95
96
}
96
97
97
98
resource "aws_iam_role_policy" "ssm_housekeeper_logging" {
98
- name = " ${ var . prefix } - lambda-logging"
99
+ name = " lambda-logging"
99
100
role = aws_iam_role. ssm_housekeeper . name
100
101
policy = templatefile (" ${ path . module } /policies/lambda-cloudwatch.json" , {
101
102
log_group_arn = aws_cloudwatch_log_group.ssm_housekeeper.arn
You can’t perform that action at this time.
0 commit comments