VIA-756 AS/AJ/DB Add permissions for SNS

Author: anoop-surej-nhs

infrastructure/modules/deploy_iam/policies/permissions/iam.json

@@ -41,7 +41,9 @@
         "arn:aws:iam::${account_id}:role/${prefix}-revalidation-function-role",
         "arn:aws:iam::${account_id}:role/${prefix}-server-function-role",
         "arn:aws:iam::${account_id}:role/${prefix}-chatbot-iam-role",
-        "arn:aws:iam::${account_id}:role/${prefix}-alarms-forwarder-subscription-filter-role"
+        "arn:aws:iam::${account_id}:role/${prefix}-alarms-forwarder-subscription-filter-role",
+        "arn:aws:iam::${account_id}:role/${prefix}-firehose-transformer",
+        "arn:aws:iam::${account_id}:role/${prefix}-log-forwarder-subscription-filter-role"
       ]
     }
   ]

infrastructure/modules/deploy_iam/policies/permissions/misc.json

@@ -152,7 +152,8 @@
         "SNS:SetTopicAttributes",
         "SNS:TagResource",
         "SNS:Subscribe",
-        "SNS:GetSubscriptionAttributes"
+        "SNS:GetSubscriptionAttributes",
+        "SNS:Unsubscribe"
       ],
       "Resource": [
         "arn:aws:sns:${region}:${account_id}:${prefix}-*",