Added statement to allow control panel to write CSV to feedback bucket (

#6275) * Added statement to allow control panel to write CSV to feedback bucket * changed resource name
ministryofjustice · Dec 11, 2024 · 84da37c · 84da37c
1 parent f107ee8
commit 84da37c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/terraform/aws/analytical-platform-development/cluster/iam-policies.tf b/terraform/aws/analytical-platform-development/cluster/iam-policies.tf
@@ -534,6 +534,16 @@ data "aws_iam_policy_document" "control_panel_api" {
       "arn:aws:iam::${var.account_ids["analytical-platform-compute-test"]}:role/analytical-platform-control-panel"
     ]
   }
+  statement {
+    sid    = "WriteToFeedbackBucket"
+    effect = "Allow"
+    actions = [
+      "s3:PutObject"
+    ]
+    resources = [
+      "arn:aws:s3:::${var.resource_prefix}-ap-feedback/*"
+    ]
+  }
 }
 
 resource "aws_iam_policy" "control_panel_api" {