diff --git a/files/sns/iam_activity_topic_policy.json.tpl b/files/sns/iam_activity_topic_policy.json.tpl index d259039..236ffd4 100644 --- a/files/sns/iam_activity_topic_policy.json.tpl +++ b/files/sns/iam_activity_topic_policy.json.tpl @@ -21,7 +21,7 @@ "Resource": "${sns_topic}", "Condition": { "StringEquals": { - "AWS:SourceOwner": "${audit_account_id}" + "AWS:SourceAccount": "${audit_account_id}" } } }, diff --git a/files/sns/security_hub_topic_policy.json.tpl b/files/sns/security_hub_topic_policy.json.tpl index b199e0e..67dfa23 100644 --- a/files/sns/security_hub_topic_policy.json.tpl +++ b/files/sns/security_hub_topic_policy.json.tpl @@ -21,7 +21,7 @@ "Resource": "${sns_topic}", "Condition": { "StringEquals": { - "AWS:SourceOwner": "${account_id}" + "AWS:SourceAccount": "${account_id}" } } }, diff --git a/iam_activity_logging.tf b/iam_activity_logging.tf index bdb1f1a..fdc19c4 100644 --- a/iam_activity_logging.tf +++ b/iam_activity_logging.tf @@ -66,7 +66,7 @@ data "aws_iam_policy_document" "sns_feedback" { condition { test = "StringEquals" - variable = "AWS:SourceOwner" + variable = "AWS:SourceAccount" values = [data.aws_caller_identity.audit.account_id] } }