all all backup actions in sanbox (#6080)

ministryofjustice · Jan 30, 2024 · b11ff73 · b11ff73
1 parent 5c9a820
commit b11ff73
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/environments/bootstrap/delegate-access/policies.tf b/terraform/environments/bootstrap/delegate-access/policies.tf
@@ -516,7 +516,7 @@ data "aws_iam_policy_document" "sandbox_additional" {
       "identitystore:DescribeUser",
       "sso:ListDirectoryAssociations",
       "wellarchitected:*",
-      "backup:StartRestoreJob",
+      "backup:*",
       "states:*"
     ]
     resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097