Inline policy for opensearch

uktrade · Sep 9, 2024 · 7dff0f7 · 7dff0f7
1 parent 7a50b1d
commit 7dff0f7
Showing 1 changed file with 1 addition and 5 deletions.
diff --git a/opensearch/main.tf b/opensearch/main.tf
@@ -4,11 +4,6 @@ data "aws_region" "current" {}
 resource "aws_kms_key" "cloudwatch_log_group_kms_key" {
   description         = "KMS Key for ${var.name}-${var.environment} CloudWatch Log encryption"
   enable_key_rotation = true
-  tags                = local.tags
-}
-
-resource "aws_kms_key_policy" "opensearch_to_cloudwatch" {
-  key_id = aws_kms_key.cloudwatch_log_group_kms_key.key_id
   policy = jsonencode({
     Id = "OpenSearchToCloudWatch"
     Statement = [
@@ -32,6 +27,7 @@ resource "aws_kms_key_policy" "opensearch_to_cloudwatch" {
     ]
     Version = "2012-10-17"
   })
+  tags = local.tags
 }
 
 resource "aws_cloudwatch_log_group" "opensearch_log_group_index_slow_logs" {