Skip to content

Commit 1776396

Browse files
committed
add uin table permission
1 parent 5b5bc7a commit 1776396

File tree

1 file changed

+13
-1
lines changed

1 file changed

+13
-1
lines changed

terraform/modules/lambdas/main.tf

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -235,7 +235,6 @@ resource "aws_iam_policy" "shared_iam_policy" {
235235
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-linkry",
236236
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-linkry/index/*",
237237
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-keys",
238-
239238
]
240239
},
241240
{
@@ -267,6 +266,19 @@ resource "aws_iam_policy" "shared_iam_policy" {
267266
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-audit-log/index/*",
268267
]
269268
},
269+
{
270+
Sid = "DynamoDBUINAccess",
271+
Effect = "Allow",
272+
Action = [
273+
"dynamodb:PutItem",
274+
"dynamodb:DescribeTable",
275+
"dynamodb:Query",
276+
],
277+
Resource = [
278+
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-uin-mapping",
279+
"arn:aws:dynamodb:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:table/infra-core-api-uin-mapping/index/*",
280+
]
281+
},
270282
{
271283
Sid = "DynamoDBStreamAccess",
272284
Effect = "Allow",

0 commit comments

Comments
 (0)