Merge pull request #9058 from ministryofjustice/feature/DPR2-1514-pol…

…icy-fix [DPR2-1576] Fix DPD DDB STS IAM policy
ministryofjustice · Dec 11, 2024 · 6045caf · 6045caf
2 parents a27b2d6 + da26278
commit 6045caf
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/terraform/environments/digital-prison-reporting/data_product_definitions.tf b/terraform/environments/digital-prison-reporting/data_product_definitions.tf
@@ -105,7 +105,7 @@ resource "aws_iam_role_policy_attachment" "dpd_table_github_deploy_put_policy" {
 
 data "aws_iam_policy_document" "dpd_table_read_policy" {
   statement {
-    sid    = "DeployDpdItems"
+    sid    = "ReadDpdItems"
     effect = "Allow"
     actions = [
       "dynamodb:DescribeTable",
@@ -114,7 +114,8 @@ data "aws_iam_policy_document" "dpd_table_read_policy" {
       "dynamodb:Query",
     ]
     resources = [
-      module.dynamo_table_dpd.dynamodb_table_arn
+      module.dynamo_table_dpd.dynamodb_table_arn,
+      "${module.dynamo_table_dpd.dynamodb_table_arn}/index/*"
     ]
   }
 }