From 70fc71f01f21339b4569b3985f64409b74cd4994 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 13:42:56 -0400
Subject: [PATCH] fix(iam): allow creating the weekly-menu githubdeploy role in
 seahaven-dev (PLAT-210)

Prod imported that role. A new account needs CreateRole on tf-managed/githubdeploy-meal-order-manager-weekly-menu.
---
 terraform/hcp_iam.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/terraform/hcp_iam.tf b/terraform/hcp_iam.tf
index 0c04085..5ca7ae0 100644
--- a/terraform/hcp_iam.tf
+++ b/terraform/hcp_iam.tf
@@ -181,6 +181,8 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
     effect = "Allow"
     actions = [
       "iam:AttachRolePolicy",
+      "iam:CreateRole",
+      "iam:DeleteRole",
       "iam:DeleteRolePolicy",
       "iam:DetachRolePolicy",
       "iam:PutRolePolicy",