Allow Create Step Functions for Sandbox Role (#5517)

* Allow Create Step Functions for Sandbox Role Allow Create Step Functions for Sandbox Role * Add state:DeleteStateMachine permission
ministryofjustice · Nov 20, 2023 · 5d3b24f · 5d3b24f
1 parent dda63a6
commit 5d3b24f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/terraform/environments/bootstrap/delegate-access/policies.tf b/terraform/environments/bootstrap/delegate-access/policies.tf
@@ -455,7 +455,10 @@ data "aws_iam_policy_document" "sandbox_additional" {
       "identitystore:DescribeUser",
       "sso:ListDirectoryAssociations",
       "wellarchitected:*",
-      "backup:StartRestoreJob"
+      "backup:StartRestoreJob",
+      "state:CreateStateMachine",
+      "state:ListStateMachines",
+      "state:DeleteStateMachine"
     ]
     resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097
   }