Fix for issue #4 (#5)

* Fix for issue #4 #4 * Fix formatting Co-authored-by: Julian Nonino <[email protected]>
cn-terraform · Jul 30, 2022 · e1f2cb6 · e1f2cb6
1 parent 561944a
commit e1f2cb6
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -43,12 +43,22 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "logs" {
 #------------------------------------------------------------------------------
 # IAM POLICY DOCUMENT - For access logs to the S3 bucket
 #------------------------------------------------------------------------------
+data "aws_caller_identity" "current" {}
+
+locals {
+  aws_principals_identifiers = (
+    length(var.aws_principals_identifiers) == 0
+    ? [data.aws_caller_identity.current.account_id]
+    : var.aws_principals_identifiers
+  )
+}
+
 data "aws_iam_policy_document" "logs_access_policy_document" {
   statement {
     effect = "Allow"
     principals {
       type        = "AWS"
-      identifiers = var.aws_principals_identifiers
+      identifiers = local.aws_principals_identifiers
     }
     actions   = ["s3:PutObject"]
     resources = ["${aws_s3_bucket.logs.arn}/*", ]