Update integrity.tf to allow the deploy user to delete log stream and…

… group. (#1215) Update integrity.tf to allow the deploy user to delete log stream and group.
dfds · Dec 4, 2023 · 0245565 · 0245565
1 parent abf0d69
commit 0245565
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/security/org-policies/integrity.tf b/security/org-policies/integrity.tf
@@ -30,6 +30,7 @@ data "aws_iam_policy_document" "integrity" {
       values = [
         "arn:aws:iam::*:role/EKSAdmin",
         "arn:aws:iam::*:role/OrgRole",
+        "arn:aws:iam::*:user/Deploy",
       ]
       variable = "aws:PrincipalArn"
     }
@@ -81,4 +82,4 @@ data "aws_iam_policy_document" "integrity" {
       variable = "aws:PrincipalArn"
     }
   }
-}
+}