1- data "aws_elb_service_account" "default" {}
1+ # ------------------------------------------------------------------------------
2+ # S3 BUCKET - For access logs
3+ # ------------------------------------------------------------------------------
4+ resource "aws_s3_bucket" "logs" {
5+ bucket = " ${ var . name_prefix } -lb-logs"
6+ acl = " log-delivery-write"
7+ tags = {
8+ Name = " ${ var . name_prefix } -lb-logs"
9+ }
10+ }
211
312# ------------------------------------------------------------------------------
4- # IAM POLICY DOCUMENT - For access logs to the s3 bucket
13+ # IAM POLICY DOCUMENT - For access logs to the S3 bucket
514# ------------------------------------------------------------------------------
15+ data "aws_elb_service_account" "default" {}
16+
617data "aws_iam_policy_document" "lb_logs_access_policy_document" {
718 statement {
819 effect = " Allow"
@@ -17,6 +28,7 @@ data "aws_iam_policy_document" "lb_logs_access_policy_document" {
1728 ]
1829
1930 resources = [
31+ " ${ aws_s3_bucket . logs . arn } /*" ,
2032 " arn:aws:s3:::${ var . name_prefix } -lb-logs/*" ,
2133 ]
2234 }
@@ -30,17 +42,6 @@ resource "aws_s3_bucket_policy" "lb_logs_access_policy" {
3042 policy = data. aws_iam_policy_document . lb_logs_access_policy_document . json
3143}
3244
33- # ------------------------------------------------------------------------------
34- # S3 BUCKET - For access logs
35- # ------------------------------------------------------------------------------
36- resource "aws_s3_bucket" "logs" {
37- bucket = " ${ var . name_prefix } -lb-logs"
38- acl = " log-delivery-write"
39- tags = {
40- Name = " ${ var . name_prefix } -lb-logs"
41- }
42- }
43-
4445# ------------------------------------------------------------------------------
4546# APPLICATION LOAD BALANCER
4647# ------------------------------------------------------------------------------
0 commit comments