Fix describeExecution permission

Crown-Commercial-Service · Nov 3, 2024 · 06160eb · 06160eb
1 parent f71af01
commit 06160eb
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/modules/postgres-etl/extract/extract_iam.tf b/modules/postgres-etl/extract/extract_iam.tf
@@ -198,10 +198,16 @@ resource "aws_iam_policy" "eks_paas_jenkins_trigger_sfn" {
       {
         Effect   = "Allow",
         Action   = [
-          "states:DescribeExecution",
           "states:StartExecution",
         ],
         Resource = aws_sfn_state_machine.rds_to_s3.arn
+      },
+      {
+        Effect   = "Allow",
+        Action   = [
+          "states:DescribeExecution",
+        ],
+        Resource = "arn:aws:states:${var.aws_region}:${var.aws_account_id}:execution:postgres-etl-rds-to-s3:*"
       }
     ]
   })