Merge pull request #8276 from ministryofjustice/add-ds-data-actions-t…

…o-oidc-role chore: add ds-data API actions to OIDC role
ministryofjustice · Oct 17, 2024 · 6503089 · 6503089
2 parents 4c7f01e + 66e98b7
commit 6503089
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/environments/bootstrap/member-bootstrap/iam.tf b/terraform/environments/bootstrap/member-bootstrap/iam.tf
@@ -452,6 +452,7 @@ data "aws_iam_policy_document" "policy" {
       "dms:RebootReplicationInstance",
       "ds:ResetUserPassword",
       "ds:DescribeDirectories",
+      "ds-data:*",
       "dynamodb:GetItem",
       "dynamodb:PutItem",
       "ecs:*Service*",