[NDR-333] Allow FHIR lambdas access to the core dynamodb table (#529)

Author: jameslinnell

README.md

@@ -29,4 +29,4 @@ As this repository is a standalone infrastructure there is no python/node based
 git config core.hooksPath .githooks
 ```
 
-Pre-commits will run on any commit. This will build docs and format the terraform.
+Pre-commits will run on all commits. This will build docs and format the terraform.

infrastructure/backup-cross-account.tf

@@ -60,7 +60,8 @@ resource "aws_backup_selection" "cross_account_backup_selection" {
     module.bulk_upload_report_dynamodb_table.dynamodb_table_arn,
     module.statistical-reports-store.bucket_arn,
     module.pdm_dynamodb_table.dynamodb_table_arn,
-    module.pdm-document-store.bucket_arn
+    module.pdm-document-store.bucket_arn,
+    module.core_dynamodb_table.dynamodb_table_arn,
   ]
 }
 

infrastructure/lambda-document-upload-check.tf

@@ -12,6 +12,8 @@ module "document_upload_check_lambda" {
     module.lloyd_george_reference_dynamodb_table.dynamodb_write_policy_document,
     module.pdm_dynamodb_table.dynamodb_read_policy_document,
     module.pdm_dynamodb_table.dynamodb_write_policy_document,
+    module.core_dynamodb_table.dynamodb_read_policy_document,
+    module.core_dynamodb_table.dynamodb_write_policy_document,
     data.aws_iam_policy.aws_lambda_vpc_access_execution_role.policy
   ]
   kms_deletion_window = var.kms_deletion_window

infrastructure/lambda-get-document-fhir.tf

@@ -40,6 +40,7 @@ module "get-doc-fhir-lambda" {
     module.ndr-app-config.app_config_policy,
     module.lloyd_george_reference_dynamodb_table.dynamodb_read_policy_document,
     module.pdm_dynamodb_table.dynamodb_read_policy_document,
+    module.core_dynamodb_table.dynamodb_read_policy_document,
     aws_iam_policy.ssm_access_policy.policy,
     module.ndr-lloyd-george-store.s3_read_policy_document,
     module.pdm-document-store.s3_read_policy_document,
@@ -66,6 +67,7 @@ module "get-doc-fhir-lambda" {
     aws_api_gateway_method.get_document_reference,
     module.pdm_dynamodb_table,
     module.lloyd_george_reference_dynamodb_table,
+    module.core_dynamodb_table,
   ]
 }
 

infrastructure/lambda-post-document-fhir.tf

@@ -6,6 +6,7 @@ module "post-document-references-fhir-lambda" {
     module.document_reference_dynamodb_table.dynamodb_write_policy_document,
     module.lloyd_george_reference_dynamodb_table.dynamodb_write_policy_document,
     module.pdm_dynamodb_table.dynamodb_write_policy_document,
+    module.core_dynamodb_table.dynamodb_write_policy_document,
     module.ndr-bulk-staging-store.s3_write_policy_document,
     module.ndr-app-config.app_config_policy,
     aws_iam_policy.ssm_access_policy.policy
@@ -30,6 +31,7 @@ module "post-document-references-fhir-lambda" {
 
   depends_on = [
     module.pdm_dynamodb_table,
+    module.core_dynamodb_table,
     module.lloyd_george_reference_dynamodb_table,
   ]
 }

infrastructure/lambda-search-document-references-fhir.tf

@@ -9,6 +9,8 @@ module "search-document-references-fhir-lambda" {
     module.lloyd_george_reference_dynamodb_table.dynamodb_write_policy_document,
     module.pdm_dynamodb_table.dynamodb_read_policy_document,
     module.pdm_dynamodb_table.dynamodb_write_policy_document,
+    module.core_dynamodb_table.dynamodb_read_policy_document,
+    module.core_dynamodb_table.dynamodb_write_policy_document,
     module.ndr-lloyd-george-store.s3_read_policy_document,
     module.ndr-document-store.s3_read_policy_document,
     module.ndr-app-config.app_config_policy
@@ -31,6 +33,7 @@ module "search-document-references-fhir-lambda" {
     module.search-document-references-gateway,
     module.ndr-app-config,
     module.pdm_dynamodb_table,
+    module.core_dynamodb_table,
     module.lloyd_george_reference_dynamodb_table,
   ]
 }