[PRP-388] supply correct s3 arn to permissions

SWhyteAnswer · SWhyteAnswer · commit 318b88437c14 · 2025-10-22T15:03:28.000+01:00
diff --git a/infrastructure/step-function-migration-dynmodb.tf b/infrastructure/step-function-migration-dynmodb.tf
@@ -36,7 +36,7 @@ data "aws_iam_policy_document" "sfn_permissions" {
       "s3:ListBucket"
     ]
     resources = [
-      module.migration-dynamodb-segment-lambda.s3_bucket_arn
+      "arn:aws:s3:::${terraform.workspace}-${var.migration_dynamodb_segment_store_bucket_name}"
     ]
   }
 
@@ -48,7 +48,7 @@ data "aws_iam_policy_document" "sfn_permissions" {
       "s3:PutObject"
     ]
     resources = [
-      "${module.migration-dynamodb-segment-lambda.s3_bucket_arn}/*"
+      "arn:aws:s3:::${terraform.workspace}-${var.migration_dynamodb_segment_store_bucket_name}/*"
     ]
   }
 

Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ data "aws_iam_policy_document" "sfn_permissions" {`
`36`	`36`	`"s3:ListBucket"`
`37`	`37`	`]`
`38`	`38`	`resources = [`
`39`		`- module.migration-dynamodb-segment-lambda.s3_bucket_arn`
	`39`	`+ "arn:aws:s3:::${terraform.workspace}-${var.migration_dynamodb_segment_store_bucket_name}"`
`40`	`40`	`]`
`41`	`41`	`}`
`42`	`42`
`@@ -48,7 +48,7 @@ data "aws_iam_policy_document" "sfn_permissions" {`
`48`	`48`	`"s3:PutObject"`
`49`	`49`	`]`
`50`	`50`	`resources = [`
`51`		`- "${module.migration-dynamodb-segment-lambda.s3_bucket_arn}/*"`
	`51`	`+ "arn:aws:s3:::${terraform.workspace}-${var.migration_dynamodb_segment_store_bucket_name}/*"`
`52`	`52`	`]`
`53`	`53`	`}`
`54`	`54`