Merge pull request #7077 from ministryofjustice/harichintala1-patch-1

Add Lambda Invoke Permissions for Reporting Role
ministryofjustice · May 23, 2024 · 6b991c2 · 6b991c2
2 parents 109a73f + f42a4c6
commit 6b991c2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/environments/bootstrap/single-sign-on/policies.tf b/terraform/environments/bootstrap/single-sign-on/policies.tf
@@ -1015,7 +1015,8 @@ data "aws_iam_policy_document" "reporting-operations" {
  "kinesisanalytics:List*",
  "kinesisanalytics:Describe*",
  "kinesisanalytics:DiscoverInputSchema",
- "kinesisanalytics:RollbackApplication"
+ "kinesisanalytics:RollbackApplication",
+ "lambda:InvokeFunction"
  ]
  resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097
  }