terraform managed_policy_arns 问题与 aws_iam_role

Question

The below code removes the iam policy eks-fargate-logging-policy. What is the right way to define aws managed and customer managed policies together?

    resource "aws_iam_policy" "eks-fargate-logging-policy" {
  name        = "eks-fargate-logging-policy"
  description = "Policy for fargate logs to cloudwatch"

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Action = [
          "logs:CreateLogStream",
          "logs:CreateLogGroup",
          "logs:DescribeLogStreams",
          "logs:PutLogEvents"
        ]
        Effect   = "Allow"
        Resource = "*"
      },
    ]
  })
}

resource "aws_iam_role" "fargate_pod_execution_role" {
  name                  = "${var.eks_cluster_name}-eks-fargate-pod-execution-role"
  assume_role_policy    = data.aws_iam_policy_document.fargate_assume_role.json

#Here's the issue
  managed_policy_arns   = [aws_iam_policy.eks-fargate-logging-policy.arn,"arn:aws:iam::aws:policy/AmazonEKSFargatePodExecutionRolePolicy"]
  force_detach_policies = true
}

Answer 1

I don't see this issue anymore. Looks like it works as expected.