Data Source: awsElbServiceAccount

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsS3BucketElbLogs = new aws.s3Bucket.S3Bucket(this, "elb_logs", {
  bucket: "my-elb-tf-test-bucket",
});
new aws.s3BucketAcl.S3BucketAcl(this, "elb_logs_acl", {
  acl: "private",
  bucket: awsS3BucketElbLogs.id,
});
const dataAwsElbServiceAccountMain =
  new aws.dataAwsElbServiceAccount.DataAwsElbServiceAccount(this, "main", {});
const dataAwsIamPolicyDocumentAllowElbLogging =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "allow_elb_logging",
    {
      statement: [
        {
          actions: ["s3:PutObject"],
          effect: "Allow",
          principals: [
            {
              identifiers: [dataAwsElbServiceAccountMain.arn],
              type: "AWS",
            },
          ],
          resources: [`\${${awsS3BucketElbLogs.arn}}/AWSLogs/*`],
        },
      ],
    }
  );
new aws.elb.Elb(this, "bar", {
  accessLogs: {
    bucket: awsS3BucketElbLogs.id,
    interval: 5,
  },
  availabilityZones: ["us-west-2a"],
  listener: [
    {
      instancePort: 8000,
      instanceProtocol: "http",
      lbPort: 80,
      lbProtocol: "http",
    },
  ],
  name: "my-foobar-terraform-elb",
});
const awsS3BucketPolicyAllowElbLogging = new aws.s3BucketPolicy.S3BucketPolicy(
  this,
  "allow_elb_logging_5",
  {
    bucket: awsS3BucketElbLogs.id,
    policy: dataAwsIamPolicyDocumentAllowElbLogging.json,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsS3BucketPolicyAllowElbLogging.overrideLogicalId("allow_elb_logging");