more permissions

nhsd-david-wass · nhsd-david-wass · commit 1290160acd94 · 2026-01-29T11:47:14.000Z
diff --git a/infrastructure/terraform/components/api/iam_role_glue.tf b/infrastructure/terraform/components/api/iam_role_glue.tf
@@ -50,7 +50,7 @@ data "aws_iam_policy_document" "glue_service_policy" {
       "s3:DeleteObject"
     ]
     resources = ["arn:aws:s3:::${local.csi}-glue-bucket/*",
-    "arn:aws:s3:::${local.csi_global}-event-reporting/*"]
+    "arn:aws:s3:::${local.csi_global}-eventcache/*"]
   }
   statement {
     sid    = "GlueCatalogAccess"

Original file line number	Diff line number	Diff line change
`@@ -50,7 +50,7 @@ data "aws_iam_policy_document" "glue_service_policy" {`
`50`	`50`	`"s3:DeleteObject"`
`51`	`51`	`]`
`52`	`52`	`resources = ["arn:aws:s3:::${local.csi}-glue-bucket/*",`
`53`		`- "arn:aws:s3:::${local.csi_global}-event-reporting/*"]`
	`53`	`+ "arn:aws:s3:::${local.csi_global}-eventcache/*"]`
`54`	`54`	`}`
`55`	`55`	`statement {`
`56`	`56`	`sid = "GlueCatalogAccess"`