Add required permissions for managing Step Functions

reference, https://aws.permissions.cloud/iam/states
ministryofjustice · Nov 22, 2023 · 9db747c · 9db747c
1 parent 811798a
commit 9db747c
Showing 1 changed file with 24 additions and 1 deletion.
diff --git a/terraform/environments/bootstrap/delegate-access/policies.tf b/terraform/environments/bootstrap/delegate-access/policies.tf
@@ -458,7 +458,30 @@ data "aws_iam_policy_document" "sandbox_additional" {
       "backup:StartRestoreJob",
       "states:CreateStateMachine",
       "states:ListStateMachines",
-      "states:DeleteStateMachine"
+      "states:DeleteStateMachine",
+      "states:CreateActivity",
+      "states:CreateStateMachine",
+      "states:CreateStateMachineAlias",
+      "states:DescribeStateMachine",
+      "states:DescribeExecution",
+      "states:DeleteActivity",
+      "states:DeleteStateMachine",
+      "states:DeleteStateMachineAlias",
+      "states:ListExecutions",
+      "states:ListStateMachines",
+      "states:ListTagsForResource",
+      "states:DescribeExecution",
+      "states:UpdateStateMachine",
+      "states:UpdateMapRun",
+      "states:UpdateStateMachineAlias",
+      "states:TagResource",
+      "states:StopExecution",
+      "states:StartSyncExecution",
+      "states:StartExecution",
+      "states:SendTaskSuccess",
+      "states:SendTaskHeartbeat",
+      "states:SendTaskFailure",
+      "states:RedriveExecution"
     ]
     resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097
   }