ECS: Policy fix

datagrok-ai · May 22, 2024 · 2e75606 · 2e75606
1 parent faa2140
commit 2e75606
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/aws/ecs.tf b/aws/ecs.tf
@@ -1053,10 +1053,10 @@ resource "aws_iam_role" "grok_spawner_task" {
               ]))
             }
           },
-          "Resource" : [
+          "Resource" : distinct(compact([
             "arn:aws:ecs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:service/${module.ecs.cluster_name}/*",
             try(length(var.grok_spawner_cvm_ecs_cluster) > 0, false) ? "arn:aws:ecs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:service/${var.grok_spawner_cvm_ecs_cluster}/*" : ""
-          ]
+          ]))
         },
         {
           "Effect" = "Allow",