adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-03 09:13:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow staging HCP apply to update the SHOC backend EB stack (PLAT-213)

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 15:21:40 -04:00
parent ae46270912
commit 50b8fd2d41
No known key found for this signature in database
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -3563,6 +3563,32 @@ Resources:
- elasticbeanstalk:UpdateEnvironment
- elasticbeanstalk:UpdateTagsForResource
Resource: arn:aws:elasticbeanstalk:us-east-1:396287094661:environment/shoc-backend/shoc-backend-staging
- Sid: ManageStagingEnvironmentStack
Effect: Allow
Action:
- cloudformation:CancelUpdateStack
- cloudformation:DescribeStackEvents
- cloudformation:DescribeStackResource
- cloudformation:DescribeStackResources
- cloudformation:DescribeStacks
- cloudformation:GetTemplate
- cloudformation:ListStackResources
- cloudformation:UpdateStack
Resource: arn:aws:cloudformation:us-east-1:396287094661:stack/awseb-e-6c9m4vb62z-stack/*
- Sid: DescribeDeploymentResources
Effect: Allow
Action:
- autoscaling:Describe*
- ec2:Describe*
- elasticloadbalancing:Describe*
Resource: "*"
- Sid: ManageStagingEnvironmentAsg
Effect: Allow
Action:
- autoscaling:PutNotificationConfiguration
- autoscaling:ResumeProcesses
- autoscaling:SuspendProcesses
Resource: arn:aws:autoscaling:us-east-1:396287094661:autoScalingGroup:*:autoScalingGroupName/awseb-e-6c9m4vb62z-stack-*
- Sid: PutStagingRuntimePolicy
Effect: Allow
Action: iam:PutRolePolicy