adam/payments-dashboard
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/payments-dashboard.git synced 2026-10-02 08:33:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(infra): add EIP describe and DynamoDB CMK grants for first apply

Browse source 
Scoped apply missed ec2:DescribeAddressesAttribute and kms Encrypt/Decrypt/GenerateDataKey on the table CMK.
This commit is contained in:
Adam Moussa 2026-09-16 14:12:34 -04:00
parent 47f85213cb
commit 66e5321a42
No known key found for this signature in database
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
terraform/hcp_iam.tf
View file

@ -471,6 +471,10 @@ data "aws_iam_policy_document" "hcptf_apply_services" {
"kms:CreateGrant",
"kms:ListGrants",
"kms:RetireGrant",
"kms:Encrypt",
"kms:Decrypt",
"kms:GenerateDataKey",
"kms:GenerateDataKeyWithoutPlaintext",
]
resources = [local.dynamodb_cmk_arn]
}
@ -553,6 +557,7 @@ data "aws_iam_policy_document" "hcptf_apply_services" {
"ec2:DeleteVpcEndpoints",
"ec2:DescribeAccountAttributes",
"ec2:DescribeAddresses",
"ec2:DescribeAddressesAttribute",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeInternetGateways",
"ec2:DescribeNatGateways",
@ -819,6 +824,8 @@ data "aws_iam_policy_document" "hcptf_plan_refresh" {
"kms:DescribeKey",
"kms:GetKeyPolicy",
"kms:ListResourceTags",
"kms:CreateGrant",
"kms:ListGrants",
]
resources = [local.dynamodb_cmk_arn]
}
@ -827,7 +834,9 @@ data "aws_iam_policy_document" "hcptf_plan_refresh" {
sid = "RefreshEc2"
effect = "Allow"
actions = [
"ec2:DescribeAccountAttributes",
"ec2:DescribeAddresses",
"ec2:DescribeAddressesAttribute",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeInternetGateways",
"ec2:DescribeNatGateways",