fix typo, upgrade python, use more restrictive iam policy

anonfriese · May 13, 2022 · 9c0b3b0 · 9c0b3b0
1 parent 18b8e73
commit 9c0b3b0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/iam.tf b/iam.tf
@@ -34,7 +34,9 @@ data "aws_iam_policy_document" "policy" {
     sid    = "ESPermission"
     effect = "Allow"
     actions = [
-      "es:*",
+      "es:ESHttpHead",
+      "es:ESHttpGet",
+      "es:ESHttpDelete",
     ]
     resources = [
       "arn:aws:es:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:domain/*",

diff --git a/variables.tf b/variables.tf
@@ -34,7 +34,7 @@ variable "index_format" {
 }
 
 variable "python_version" {
-  default = "3.6"
+  default = "3.9"
 }
 
 variable "subnet_ids" {
@@ -44,7 +44,7 @@ variable "subnet_ids" {
 }
 
 variable "security_group_ids" {
-  description = "Addiational Security Ids To add."
+  description = "Additional Security Ids To add."
   type        = list(string)
   default     = []
 }