Merge pull request #13 from NHSDigital/mm-odin-266-fix-get-account-alias

matt-mercer · web-flow · commit 605604d3f15e · 2025-08-21T12:16:29.000+01:00
odin-266: GetAccountAlias is a supportapp permission .. not iam
diff --git a/iam.tf b/iam.tf
@@ -38,7 +38,7 @@ data "aws_iam_policy_document" "this" {
       "storagegateway:ListGateways",
       "storagegateway:ListTagsForResource",
       "iam:ListAccountAliases",
-      "iam:GetAccountAlias",
+      "supportapp:GetAccountAlias",
       "sts:GetCallerIdentity"
     ]
     resources = [

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ data "aws_iam_policy_document" "this" {`
`38`	`38`	`"storagegateway:ListGateways",`
`39`	`39`	`"storagegateway:ListTagsForResource",`
`40`	`40`	`"iam:ListAccountAliases",`
`41`		`- "iam:GetAccountAlias",`
	`41`	`+ "supportapp:GetAccountAlias",`
`42`	`42`	`"sts:GetCallerIdentity"`
`43`	`43`	`]`
`44`	`44`	`resources = [`