Permissions for creation of new IAM policies

nationalarchives · Aug 21, 2024 · d705ea2 · d705ea2
1 parent 607cbc9
commit d705ea2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modules/environment-roles/templates/shared_iam_terraform_policy_1.json.tpl b/modules/environment-roles/templates/shared_iam_terraform_policy_1.json.tpl
@@ -8,6 +8,8 @@
         "iam:*"
       ],
       "Resource": [
+         "arn:aws:iam::${account_id}:policy/TDRProcessDataLoadInvokeLambdaPolicy${title(environment)}",
+         "arn:aws:iam::${account_id}:policy/TDRProcessDataLoadS3Policy${title(environment)}",
          "arn:aws:iam::${account_id}:policy/TDRTransferServiceECSExecutionPolicy${title(environment)}",
          "arn:aws:iam::${account_id}:policy/TDRTransferServiceECSTaskPolicy${title(environment)}",
          "arn:aws:iam::${account_id}:role/TDRTransferServiceECSTaskRole${title(environment)}",