AllowCodeStarAndCodeConnectionsAccess (#2544)

Tian-2017 · web-flow · commit 5fe0114a1c03 · 2025-11-07T17:57:56.000Z
diff --git a/terraform/core/48-staging-codebuild-dap-airflow-sync.tf b/terraform/core/48-staging-codebuild-dap-airflow-sync.tf
@@ -84,8 +84,16 @@ resource "aws_iam_role_policy" "codebuild_dap_airflow_staging_policy" {
         Resource = "arn:aws:codebuild:${var.aws_deploy_region}:${var.aws_deploy_account_id}:report-group/${local.identifier_prefix}-dap-airflow-sync*"
       },
       {
-        Effect   = "Allow"
-        Action   = "codestar-connections:UseConnection"
+        Sid    = "AllowCodeStarAndCodeConnectionsAccess"
+        Effect = "Allow"
+        Action = [
+          "codestar-connections:GetConnection",
+          "codestar-connections:GetConnectionToken",
+          "codestar-connections:UseConnection",
+          "codeconnections:GetConnection",
+          "codeconnections:GetConnectionToken",
+          "codeconnections:UseConnection"
+        ]
         Resource = aws_codestarconnections_connection.dap_airflow_stg[0].arn
       }
     ]

Original file line number	Diff line number	Diff line change
`@@ -84,8 +84,16 @@ resource "aws_iam_role_policy" "codebuild_dap_airflow_staging_policy" {`
`84`	`84`	`Resource = "arn:aws:codebuild:${var.aws_deploy_region}:${var.aws_deploy_account_id}:report-group/${local.identifier_prefix}-dap-airflow-sync*"`
`85`	`85`	`},`
`86`	`86`	`{`
`87`		`- Effect = "Allow"`
`88`		`- Action = "codestar-connections:UseConnection"`
	`87`	`+ Sid = "AllowCodeStarAndCodeConnectionsAccess"`
	`88`	`+ Effect = "Allow"`
	`89`	`+ Action = [`
	`90`	`+ "codestar-connections:GetConnection",`
	`91`	`+ "codestar-connections:GetConnectionToken",`
	`92`	`+ "codestar-connections:UseConnection",`
	`93`	`+ "codeconnections:GetConnection",`
	`94`	`+ "codeconnections:GetConnectionToken",`
	`95`	`+ "codeconnections:UseConnection"`
	`96`	`+ ]`
`89`	`97`	`Resource = aws_codestarconnections_connection.dap_airflow_stg[0].arn`
`90`	`98`	`}`
`91`	`99`	`]`