Merge pull request #123 from NHSDigital/bugfix/eja-eli-131-adding-additional-permissions-for-deployment-role

eli-131 adding additional permissions for github role

Author: eddalmond1

infrastructure/stacks/iams-developer-roles/github_actions_policies.tf

@@ -61,6 +61,11 @@ resource "aws_iam_policy" "api_infrastructure" {
           "kms:GetKeyPolicy*",
           "kms:GetKeyRotationStatus",
           "kms:Decrypt*",
+          "kms:DeleteAlias",
+          "kms:UpdateKeyDescription",
+          "kms:CreateGrant",
+          "kms:CreateAlias",
+
 
           # Cloudwatch permissions
           "logs:Describe*",
@@ -78,6 +83,8 @@ resource "aws_iam_policy" "api_infrastructure" {
           "iam:Create*",
           "iam:Update*",
           "iam:Delete*",
+          "iam:PutRolePermissionsBoundary",
+          "iam:PutRolePolicy",
 
           # ssm
           "ssm:GetParameter",