Merge branch 'master' into alessio/BFD-3825__fix-inconsitent-rds-sett…

…ings
CMSgov · Jan 14, 2025 · 8b35267 · 8b35267
2 parents 2af9458 + 938d25e
commit 8b35267
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/ops/terraform/env/mgmt/github-actions-iam.tf b/ops/terraform/env/mgmt/github-actions-iam.tf
@@ -403,6 +403,14 @@ resource "aws_iam_policy" "github_actions_ci_ops" {
           ]
           Resource = "*"
         },
+        {
+          Sid    = "AllowPolicyManagementOfAllKeys"
+          Effect = "Allow"
+          Action = [
+            "kms:PutKeyPolicy",
+          ]
+          Resource = "*"
+        },
         {
           Sid    = "AllowSNS"
           Effect = "Allow"
@@ -427,7 +435,8 @@ resource "aws_iam_policy" "github_actions_ci_ops" {
           Action = [
             "iam:Get*",
             "iam:List*",
-            "iam:DeletePolicyVersion"
+            "iam:DeletePolicyVersion",
+            "iam:CreatePolicyVersion"
           ]
           Resource = "*"
         },