Adding CreateGroup to apply role

ministryofjustice · Jan 6, 2025 · fcc41a7 · fcc41a7
1 parent b0bb665
commit fcc41a7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/github-oidc-provider/main.tf b/modules/github-oidc-provider/main.tf
@@ -151,6 +151,7 @@ data "aws_iam_policy_document" "extra_permissions_apply" {
       "identitystore:ListGroups",
       "identitystore:GetGroupId",
       "identitystore:DescribeGroup",
+      "identitystore:CreateGroup",
       "kms:Decrypt",
       "lambda:*",
       "license-manager:*",