Skip to content

Commit 83de4b5

Browse files
committed
allow SQS send message permission
1 parent eda54ff commit 83de4b5

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

terraform/modules/lambdas/main.tf

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,9 +108,25 @@ resource "aws_iam_policy" "entra_policy" {
108108
}
109109
]
110110
}))
111+
}
111112

113+
resource "aws_iam_policy" "api_only_policy" {
114+
name = "${var.ProjectId}-entra-policy"
115+
policy = jsonencode(({
116+
Version = "2012-10-17"
117+
Statement = [
118+
{
119+
Effect = "Allow",
120+
Action = ["sqs:SendMessage"],
121+
Resource = [
122+
"arn:aws:sqs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:infra-core-api-*",
123+
]
124+
}
125+
]
126+
}))
112127
}
113128

129+
114130
resource "aws_iam_policy" "sqs_policy" {
115131
name = "${var.ProjectId}-sqs-consumer-policy"
116132
policy = jsonencode(({

0 commit comments

Comments
 (0)