Skip to content

Commit 645b7df

Browse files
author
EC2 Default User
committed
adding dynamodb permissions
1 parent 524554e commit 645b7df

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

mwaa-iam.tf

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -162,6 +162,23 @@ data "aws_iam_policy_document" "mwaa_policy" {
162162
}
163163
}
164164

165+
statement {
166+
effect = "Allow"
167+
actions = [
168+
"dynamodb:Describe*",
169+
"dynamodb:PartiQLSelect",
170+
"dynamodb:Get*",
171+
"dynamodb:Scan",
172+
"dynamodb:Query",
173+
"dynamodb:BatchGetItem",
174+
"dynamodb:ConditionCheckItem",
175+
"dynamodb:List*",
176+
]
177+
resources = [
178+
"arn:aws:dynamodb:*:${data.aws_caller_identity.current.account_id}:*"
179+
]
180+
}
181+
165182
# Policy to grant acces to SSM
166183
statement {
167184
effect = "Allow"

0 commit comments

Comments
 (0)