[NDR-333] Add core dynamo policies

jameslinnell · jameslinnell · commit 0bfa8d942e6e · 2025-12-01T17:15:45.000Z
diff --git a/infrastructure/backup-cross-account.tf b/infrastructure/backup-cross-account.tf
@@ -60,7 +60,8 @@ resource "aws_backup_selection" "cross_account_backup_selection" {
     module.bulk_upload_report_dynamodb_table.dynamodb_table_arn,
     module.statistical-reports-store.bucket_arn,
     module.pdm_dynamodb_table.dynamodb_table_arn,
-    module.pdm-document-store.bucket_arn
+    module.pdm-document-store.bucket_arn,
+    module.core_dynamodb_table.dynamodb_table_arn,
   ]
 }
 
diff --git a/infrastructure/lambda-document-upload-check.tf b/infrastructure/lambda-document-upload-check.tf
@@ -12,6 +12,8 @@ module "document_upload_check_lambda" {
     module.lloyd_george_reference_dynamodb_table.dynamodb_write_policy_document,
     module.pdm_dynamodb_table.dynamodb_read_policy_document,
     module.pdm_dynamodb_table.dynamodb_write_policy_document,
+    module.core_dynamodb_table.dynamodb_read_policy_document,
+    module.core_dynamodb_table.dynamodb_write_policy_document,
     data.aws_iam_policy.aws_lambda_vpc_access_execution_role.policy
   ]
   kms_deletion_window = var.kms_deletion_window

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,8 @@ resource "aws_backup_selection" "cross_account_backup_selection" {`
`60`	`60`	`module.bulk_upload_report_dynamodb_table.dynamodb_table_arn,`
`61`	`61`	`module.statistical-reports-store.bucket_arn,`
`62`	`62`	`module.pdm_dynamodb_table.dynamodb_table_arn,`
`63`		`- module.pdm-document-store.bucket_arn`
	`63`	`+ module.pdm-document-store.bucket_arn,`
	`64`	`+ module.core_dynamodb_table.dynamodb_table_arn,`
`64`	`65`	`]`
`65`	`66`	`}`
`66`	`67`
Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,8 @@ module "document_upload_check_lambda" {`
`12`	`12`	`module.lloyd_george_reference_dynamodb_table.dynamodb_write_policy_document,`
`13`	`13`	`module.pdm_dynamodb_table.dynamodb_read_policy_document,`
`14`	`14`	`module.pdm_dynamodb_table.dynamodb_write_policy_document,`
	`15`	`+ module.core_dynamodb_table.dynamodb_read_policy_document,`
	`16`	`+ module.core_dynamodb_table.dynamodb_write_policy_document,`
`15`	`17`	`data.aws_iam_policy.aws_lambda_vpc_access_execution_role.policy`
`16`	`18`	`]`
`17`	`19`	`kms_deletion_window = var.kms_deletion_window`