[PRME-73] feature flag add permission to SSM for upload pilot (#389)

Author: NogaNHS

infrastructure/lambda-document-status-check-result.tf

@@ -57,6 +57,7 @@ module "document-status-check-lambda" {
   handler = "handlers.document_status_check_handler.lambda_handler"
   iam_role_policy_documents = [
     module.ndr-app-config.app_config_policy,
+    aws_iam_policy.ssm_access_policy.policy,
     module.document_reference_dynamodb_table.dynamodb_read_policy_document,
     module.document_reference_dynamodb_table.dynamodb_write_policy_document,
     module.lloyd_george_reference_dynamodb_table.dynamodb_read_policy_document,

infrastructure/lambda-feature-flags.tf

@@ -56,7 +56,8 @@ module "feature-flags-lambda" {
   name    = "FeatureFlagsLambda"
   handler = "handlers.feature_flags_handler.lambda_handler"
   iam_role_policy_documents = [
-    module.ndr-app-config.app_config_policy
+    module.ndr-app-config.app_config_policy,
+    aws_iam_policy.ssm_access_policy.policy,
   ]
   rest_api_id       = aws_api_gateway_rest_api.ndr_doc_store_api.id
   resource_id       = module.feature-flags-gateway.gateway_resource_id