Adding UpdateAssumeRolePolicy permission to the github user (#401)

cds-snc · Jul 16, 2024 · 2de255c · 2de255c
1 parent a934391
commit 2de255c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/github-user.tf b/terraform/github-user.tf
@@ -54,7 +54,8 @@ resource "aws_iam_policy" "Route53TerraformDeploy" {
           "iam:GetPolicyVersion",
           "iam:GetPolicy",
           "iam:ListAttachedRolePolicies",
-          "iam:ListAttachedUserPolicies"
+          "iam:ListAttachedUserPolicies",
+          "iam:UpdateAssumeRolePolicy"
         ],
         "Resource" : [
           "arn:aws:iam::866996500832:role/notify_prod_dns_manager",