fix: billing extract tags IAM role and S3 prefix (#319)

Update billing extract tags to allow it to write to write to the correct prefix in the data lake bucket.
cds-snc · Nov 7, 2024 · 9ac67f2 · 9ac67f2
1 parent e0d782e
commit 9ac67f2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/terragrunt/org_account/cost_usage_report/iam.tf b/terragrunt/org_account/cost_usage_report/iam.tf
@@ -43,7 +43,7 @@ data "aws_iam_policy_document" "billing_extract_tags" {
       "s3:PutObject"
     ]
     resources = [
-      "${local.data_lake_raw_s3_bucket_arn}/operations/aws/organization/account-tags.json",
+      "${local.data_lake_raw_s3_bucket_arn}/operations/aws/organization/*",
     ]
   }
 }

diff --git a/terragrunt/org_account/cost_usage_report/lambdas/billing_extract_tags/main.py b/terragrunt/org_account/cost_usage_report/lambdas/billing_extract_tags/main.py
@@ -68,6 +68,6 @@ def handler(event, context):
 
     # save accounts to an s3 bucket
     logging.info("Saving account tags to s3")
-    s3.put_object(Bucket=TARGET_BUCKET, Key="/operations/aws/organization/account-tags.json", Body=accounts)
+    s3.put_object(Bucket=TARGET_BUCKET, Key="operations/aws/organization/account-tags.json", Body=accounts)
 
     return {"statusCode": 200}