eli-417 permission for preprod db seeding (#322)

Author: Karthikeyannhs

infrastructure/stacks/iams-developer-roles/github_actions_policies.tf

@@ -117,7 +117,8 @@ resource "aws_iam_policy" "dynamodb_management" {
             "dynamodb:PutItem",
             "dynamodb:DeleteItem",
             "dynamodb:Scan",
-            "dynamodb:BatchWriteItem"
+            "dynamodb:BatchWriteItem",
+            "dynamodb:Query"
           ],
           Resource = [
             "arn:aws:dynamodb:*:${data.aws_caller_identity.current.account_id}:table/*eligibility-signposting-api-${var.environment}-eligibility_datastore"

infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf

@@ -244,7 +244,8 @@ data "aws_iam_policy_document" "permissions_boundary" {
         "dynamodb:PutItem",
         "dynamodb:DeleteItem",
         "dynamodb:Scan",
-        "dynamodb:BatchWriteItem"
+        "dynamodb:BatchWriteItem",
+        "dynamodb:Query"
       ]
       resources = ["*"]
     }