From 7dff0f7f2e87f57fab899c2af14f8672297f7bf9 Mon Sep 17 00:00:00 2001
From: Anthony Roy <anthony.roy@digital.trade.gov.uk>
Date: Mon, 9 Sep 2024 12:10:06 +0100
Subject: [PATCH] Inline policy for opensearch

---
 opensearch/main.tf | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/opensearch/main.tf b/opensearch/main.tf
index 27765544..70134949 100644
--- a/opensearch/main.tf
+++ b/opensearch/main.tf
@@ -4,11 +4,6 @@ data "aws_region" "current" {}
 resource "aws_kms_key" "cloudwatch_log_group_kms_key" {
   description         = "KMS Key for ${var.name}-${var.environment} CloudWatch Log encryption"
   enable_key_rotation = true
-  tags                = local.tags
-}
-
-resource "aws_kms_key_policy" "opensearch_to_cloudwatch" {
-  key_id = aws_kms_key.cloudwatch_log_group_kms_key.key_id
   policy = jsonencode({
     Id = "OpenSearchToCloudWatch"
     Statement = [
@@ -32,6 +27,7 @@ resource "aws_kms_key_policy" "opensearch_to_cloudwatch" {
     ]
     Version = "2012-10-17"
   })
+  tags = local.tags
 }
 
 resource "aws_cloudwatch_log_group" "opensearch_log_group_index_slow_logs" {