Addin resource policy

Author: mauricios

data.tf

@@ -1,3 +1,19 @@
 data "aws_vpc" "this" {
   id = "${var.vpc_id}"
 }
+
+data "aws_iam_policy_document" "this" {
+  statement {
+    actions = [
+      "logs:CreateLogStream",
+      "logs:PutLogEvents",
+    ]
+
+    resources = ["${aws_cloudwatch_log_group.this.arn}:*"]
+
+    principals {
+      identifiers = ["es.amazonaws.com"]
+      type        = "Service"
+    }
+  }
+}

main.tf

@@ -164,3 +164,8 @@ resource "aws_elasticsearch_domain_policy" "this" {
 }
 POLICIES
 }
+
+resource "aws_cloudwatch_log_resource_policy" "this" {
+  policy_document = "${data.aws_iam_policy_document.this.json}"
+  policy_name     = "${local.id}-ElasticSearch-Index-Logs"
+}