[NRL-1179] Fix naming in daily-build for codebuild runner. Fix perms for pat token access

Author: mattdean3-nhs

.github/workflows/daily-build.yml

@@ -19,7 +19,7 @@ on:
 jobs:
   build:
     name: Build - ${{ github.ref }}
-    runs-on: codebuild-nhsd-nrlf--ci-build-project-${{ github.run_id }}-${{ github.run_attempt }}
+    runs-on: codebuild-nhsd-nrlf-ci-build-project-${{ github.run_id }}-${{ github.run_attempt }}
 
     steps:
       - name: Git clone - ${{ github.ref }}

terraform/account-wide-infrastructure/mgmt/codebuild.tf

@@ -56,7 +56,7 @@ data "aws_iam_policy_document" "codebuild_policy" {
       "secretsmanager:ListSecretVersionIds"
     ]
     resources = [
-      "arn:aws:secretsmanager:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:secret:${local.project}--codebuild-github-pat",
+      "arn:aws:secretsmanager:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:secret:${local.project}--codebuild-github-pat-*",
     ]
   }