This message was deleted.

sparse-intern-71089

04/29/2021, 10:06 PM

This message was deleted.

little-cartoon-10569

04/29/2021, 10:14 PM

(I think) the problem isn't with the policy, it's with the Resource property.

little-cartoon-10569

04/29/2021, 10:15 PM

That arn is an output, so the value when interpolated like that is an error message, which includes newlines.

little-cartoon-10569

04/29/2021, 10:15 PM

But the Resource property isn't allowed have newlines.

mysterious-wolf-74677

04/29/2021, 10:15 PM

yeah, it looks like that's the issue @little-cartoon-10569 I just started removing code chunks to see what might change the error, and the

"${foobarLogGroup.arn}:*"

is where it's stemming there

little-cartoon-10569

04/29/2021, 10:16 PM

You need to interpolate using

apply()

pulumi.interpolate

, or .. onesec, there's a nice trick I found a few months back, I'll go hunt it down.

little-cartoon-10569

04/29/2021, 10:19 PM

Try this:

Untitled

little-cartoon-10569

04/29/2021, 10:20 PM

Two tricks here: cast to aws.iam.PolicyDocument, which Pulumi converts to JSON for you, later in the process; and pulumi.interpolate``.

little-cartoon-10569

04/29/2021, 10:21 PM

If you didn't have the ":*" at the end of the arn, then you wouldn't need to interpolate at all. The cast to aws.iam.PolicyDocument would be enough.

mysterious-wolf-74677

04/29/2021, 10:21 PM

interesting, nice trick @little-cartoon-10569

little-cartoon-10569

04/29/2021, 10:22 PM

Yea it's quite nice. Even allows the IDE to type check, property-validate and auto-expand / intellisense...

little-cartoon-10569

04/29/2021, 10:23 PM

Unfortunately not everywhere that takes a PolicyDocument supports this trick, but RolePolicy does.

mysterious-wolf-74677

04/29/2021, 10:24 PM

ok cool, thanks for that!

mysterious-wolf-74677

04/29/2021, 10:25 PM

@little-cartoon-10569 how did you get the formatting colors to show up?

mysterious-wolf-74677

04/29/2021, 10:25 PM

here in slack?

little-cartoon-10569

04/29/2021, 10:25 PM

I used a Text Snippet (lightning menu <---) and selected TypeScript.

little-cartoon-10569

04/29/2021, 10:26 PM

It also allows collapsing, which is really great if it's a big piece of code. Makes the channel / thread much tidier.

mysterious-wolf-74677

04/29/2021, 10:28 PM

@little-cartoon-10569 just found all that! Didn't even know that was a thing. Thanks man, I've learned a bunch now 🙂

👍 1

2 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.