Skip to content

Commit 2b7f41a

Browse files
authored
Added DataHubGlueReadRole to the iam:PassRole policy for the data-and-insight department (#2596)
1 parent 10a7aa8 commit 2b7f41a

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

terraform/modules/department/50-aws-iam-policies.tf

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1279,7 +1279,8 @@ data "aws_iam_policy_document" "department_ecs_passrole" {
12791279
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${local.department_identifier}*-ecs-execution-role", # Defined in ecs repo.
12801280
],
12811281
local.department_identifier == "data-and-insight" ? [
1282-
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/datahub-task-execution-role" # Defined in dap-datahub repo
1282+
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/datahub-task-execution-role", # Defined in dap-datahub repo
1283+
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/DataHubGlueReadRole" # Defined in dap-datahub repo
12831284
] : []
12841285
)
12851286
condition {

0 commit comments

Comments
 (0)