diff --git a/modules/webhook/eventbridge/README.md b/modules/webhook/eventbridge/README.md index c47a8863ae..74e20afb37 100644 --- a/modules/webhook/eventbridge/README.md +++ b/modules/webhook/eventbridge/README.md @@ -34,6 +34,7 @@ No modules. | [aws_iam_role_policy.dispatcher_logging](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | | [aws_iam_role_policy.dispatcher_sqs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | | [aws_iam_role_policy.dispatcher_ssm](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | +| [aws_iam_role_policy.dispatcher_workflow_job_sqs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | | [aws_iam_role_policy.dispatcher_xray](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | | [aws_iam_role_policy.webhook_eventbridge](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | | [aws_iam_role_policy.webhook_kms](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource | diff --git a/modules/webhook/eventbridge/dispatcher.tf b/modules/webhook/eventbridge/dispatcher.tf index 19016091e3..549d4c2a55 100644 --- a/modules/webhook/eventbridge/dispatcher.tf +++ b/modules/webhook/eventbridge/dispatcher.tf @@ -143,3 +143,13 @@ resource "aws_iam_role_policy" "dispatcher_xray" { policy = data.aws_iam_policy_document.lambda_xray[0].json role = aws_iam_role.dispatcher_lambda.name } + +resource "aws_iam_role_policy" "dispatcher_workflow_job_sqs" { + count = var.config.sqs_workflow_job_queue != null ? 1 : 0 + name = "publish-workflow-job-sqs-policy" + role = aws_iam_role.dispatcher_lambda.name + + policy = templatefile("${path.module}/../policies/lambda-publish-sqs-policy.json", { + sqs_resource_arns = jsonencode([var.config.sqs_workflow_job_queue.arn]) + }) +}