sid and statement attributes

terraform-modules · Oct 22, 2020 · d3b455f · d3b455f
1 parent a37fcc8
commit d3b455f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -130,13 +130,14 @@ data "aws_iam_policy_document" "this" {
     }
   }
   statement {
-      sid           = "IPAddressRestriction"
+      sid           = "RemoteAccessBucketRestrictions"
       effect        = "Deny"
       actions       = ["s3:*"]
       principals {
         type        = "AWS"
         identifiers = ["*"]
       }
+      resources = [aws_s3_bucket.this.arn, "${aws_s3_bucket.this.arn}/*"]
       dynamic "condition" {
         for_each = local.s3_bucket_conditions
         iterator = c