fix(infra): allow scoped apply to modify SG rules in place

Authorize/Revoke plus description updates are not enough for aws_vpc_security_group_*_rule in-place changes after the bootstrap window.
This commit is contained in:
Adam Moussa 2026-09-16 17:27:24 -04:00
parent ace0a29e25
commit ca9772ade3
No known key found for this signature in database

View file

@ -368,6 +368,7 @@ data "aws_iam_policy_document" "hcptf_apply_services" {
"ec2:DetachInternetGateway",
"ec2:DisassociateAddress",
"ec2:DisassociateRouteTable",
"ec2:ModifySecurityGroupRules",
"ec2:ModifySubnetAttribute",
"ec2:ModifyVpcAttribute",
"ec2:ReleaseAddress",