Merge pull request #4 from cmdlabs/fix-dynamodb-iam

Fix dynamodb iam
cmdlabs · Aug 13, 2019 · 2f10b52 · 2f10b52
2 parents 85fc788 + 65793f4
commit 2f10b52
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.0] - 2019-08-13
+### Fixed
+- Fixed IAM permission to dynamoDB table (added expected prefix)
+
 ## [0.3.0] - 2019-06-03
 ### Breaking
 - Updated code to terraform 0.12.0

diff --git a/iam_policy.tf b/iam_policy.tf
@@ -30,7 +30,7 @@ data "aws_iam_policy_document" "iam-role-policy" {
 
   statement {
     actions   = ["dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:DeleteItem"]
-    resources = ["arn:aws:dynamodb:*:*:table/terraform-lock"]
+    resources = ["arn:aws:dynamodb:*:*:table/${var.resource_prefix}-terraform-lock"]
   }
 }