data.aws_iam_policy_document.firehose.tf

data "aws_iam_policy_document" "firehose" {
  statement {
    actions = [
      "s3:AbortMultipartUpload",
      "s3:GetBucketLocation",
      "s3:GetObject",
      "s3:ListBucket",
      "s3:ListBucketMultipartUploads",
    "s3:PutObject"]

    resources = [
      "${aws_s3_bucket.log_bucket.arn}",
    "${aws_s3_bucket.log_bucket.arn}/*"]
  }
}