fix: Use aws_partition for govcloud users in ami_id_ssm_parameter_rea…

…d policy definition (#2614)
philips-labs · Nov 3, 2022 · 7ac65e5 · 7ac65e5
1 parent 505adf3
commit 7ac65e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/runners/scale-up.tf b/modules/runners/scale-up.tf
@@ -126,7 +126,7 @@ resource "aws_iam_role_policy" "ami_id_ssm_parameter_read" {
             "ssm:GetParameter"
           ],
           "Resource": [
-            "arn:aws:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"
+            "arn:${var.aws_partition}:ssm:${var.aws_region}:${data.aws_caller_identity.current.account_id}:parameter/${trimprefix(var.ami_id_ssm_parameter_name, "/")}"
           ]
         }
       ]