DOPS-101 Add dynamodb permissions to jenkins role

ModusCreateOrg · Sep 10, 2022 · 63150d0 · 63150d0
1 parent e6ab269
commit 63150d0
Show file tree

Hide file tree

Showing 2 changed files with 200 additions and 20 deletions.
diff --git a/terraform/bootstrap/jenkins.tf b/terraform/bootstrap/jenkins.tf
@@ -31,6 +31,13 @@ data "aws_iam_policy_document" "terraform_backend_role_policy_document" {
     actions   = ["s3:*"]
     resources = ["arn:aws:s3:::${module.bootstrap.state_bucket}/*"]
   }
+
+  statement {
+    effect = "Allow"
+
+    actions   = ["dynamodb:*"]
+    resources = ["arn:aws:dynamodb:${var.aws_region}:${data.aws_caller_identity.current.account_id}:table/${module.bootstrap.dynamodb_table}"]
+  }
 }
 
 resource "aws_iam_policy" "terraform_backend_role_policy" {