workflow permissions

LBHackney-IT · Oct 31, 2023 · 88b8903 · 88b8903
1 parent 81eb3e9
commit 88b8903
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/terraform/modules/rds-snapshot-to-s3/iam.tf b/terraform/modules/rds-snapshot-to-s3/iam.tf
@@ -149,6 +149,17 @@ data "aws_iam_policy_document" "rds_snapshot_s3_to_s3_copier_role_policy" {
       var.target_bucket_kms_key_arn
     ]
   }
+
+  statement {
+    actions = [
+      "glue:StartWorkflowRun"
+    ]
+    effect = "Allow"
+    resources = [
+      var.workflow_arn,
+      var.backdated_workflow_arn
+    ]
+  }
 }
 
 resource "aws_iam_policy" "rds_snapshot_s3_to_s3_copier_role_policy" {