Allow update service

Author: singhals

.github/workflows/deploy.yml

@@ -52,15 +52,15 @@ jobs:
           image: sync-svc-cube:${{ github.sha }}
 
       - name: Deploy cube-api task definition
-        uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a
+        uses: aws-actions/amazon-ecs-deploy-task-definition@v2.3.0
         with:
           task-definition: ${{ steps.cube-api-task-def.outputs.task-definition }}
           service: cube_api
           cluster: production
           wait-for-service-stability: true
 
       - name: Deploy cube-refresh-worker task definition
-        uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a
+        uses: aws-actions/amazon-ecs-deploy-task-definition@v2.3.0
         with:
           task-definition: ${{ steps.cube-refresh-worker-task-def.outputs.task-definition }}
           service: cube_refresh_worker

terraform/iam.tf

@@ -53,12 +53,13 @@ resource "aws_iam_policy" "sync_svc_cube_ecr_policy" {
         "Resource" : aws_ecr_repository.sync_svc_cube_repo.arn
       },
       {
-        "Sid" : "AllowTaskDefinitionUpdates",
+        "Sid" : "AllowEcsServiceDeploys",
         "Effect" : "Allow",
         "Action" : [
           "ecs:DescribeTaskDefinition",
           "ecs:RegisterTaskDefinition",
-          "ecs:DescribeServices"
+          "ecs:DescribeServices",
+          "ecs:UpdateService"
         ],
         "Resource" : "*"
       },