Tighten this IAM policy statement nresource

ServerlessOpsIO · Aug 17, 2024 · 992fce0 · 992fce0
1 parent 2a33c07
commit 992fce0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/stacksets/datadog-shipping/logs-template.yaml b/stacksets/datadog-shipping/logs-template.yaml
@@ -53,7 +53,7 @@ Resources:
               - firehose:PutRecordBatch
               - kinesis:PutRecord
               - kinesis:PutRecordBatch
-            Resource: !Sub "arn:aws:firehose:${AWS::Region}:${AWS::AccountId}:*"
+            Resource: !GetAtt DatadogDeliveryStream.Arn
           - Effect: Allow
             Action:
               - iam:PassRole