Update readonlyaccess policy arn to account for gov

jamesyang-lucid · jamesyang-lucid · commit e1ec374f92ac · 2025-04-08T13:31:09.000-06:00
diff --git a/modules/import-role/main.tf b/modules/import-role/main.tf
@@ -26,5 +26,5 @@ resource "aws_iam_role" "import_role" {
 
 resource "aws_iam_role_policy_attachment" "read_only_policy_attachment" {
   role       = aws_iam_role.import_role.name
-  policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
+  policy_arn = "arn:${data.aws_partition.current.partition}:iam::aws:policy/ReadOnlyAccess"
 }

Original file line number	Diff line number	Diff line change
`@@ -26,5 +26,5 @@ resource "aws_iam_role" "import_role" {`
`26`	`26`
`27`	`27`	`resource "aws_iam_role_policy_attachment" "read_only_policy_attachment" {`
`28`	`28`	`role = aws_iam_role.import_role.name`
`29`		`- policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"`
	`29`	`+ policy_arn = "arn:${data.aws_partition.current.partition}:iam::aws:policy/ReadOnlyAccess"`
`30`	`30`	`}`