Update integrity.tf to allow the deploy user to delete log stream and…

… group. Update integrity.tf to allow the deploy user to delete log stream and group.
dfds · Nov 30, 2023 · 75d4a7f · 75d4a7f
1 parent b3a311f
commit 75d4a7f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/security/org-policies/integrity.tf b/security/org-policies/integrity.tf
@@ -30,6 +30,7 @@ data "aws_iam_policy_document" "integrity" {
       values = [
         "arn:aws:iam::*:role/EKSAdmin",
         "arn:aws:iam::*:role/OrgRole",
+        "arn:aws:iam::*:user/Deploy",
       ]
       variable = "aws:PrincipalArn"
     }
@@ -81,4 +82,4 @@ data "aws_iam_policy_document" "integrity" {
       variable = "aws:PrincipalArn"
     }
   }
-}
+}