Creating secret to store gateway registration information.

ministryofjustice · Jan 11, 2024 · 3d447c6 · 3d447c6
1 parent a16dc0c
commit 3d447c6
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-iam.tf b/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-iam.tf
@@ -7,6 +7,18 @@ data "aws_iam_policy_document" "powerbi_gateway_data_access" {
     ]
     resources = formatlist("arn:aws:iam::%s:role/alpha_*", local.environment_configuration.powerbi_target_accounts)
   }
+
+  statement {
+    sid = "AccessPowerBIGatewayCredentials"
+
+    actions = [
+      "secretsmanager:GetSecretValue",
+      "secretsmanager:DescribeSecret"
+    ]
+    resources = [
+      aws_secretsmanager_secret.powerbi_gateway_reg_credentials.arn
+    ]
+  }
 }
 
 

diff --git a/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-secret.tf b/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-secret.tf
@@ -0,0 +1,3 @@
+resource "aws_secretsmanager_secret" "powerbi_gateway_reg_credentials" {
+  name = "${local.environment_configuration.powerbi_gateway_ec2.instance_name}-credentials"
+}