Add describe permission

Crown-Commercial-Service · Nov 3, 2024 · f71af01 · f71af01
1 parent 4239234
commit f71af01
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/modules/postgres-etl/extract/extract_iam.tf b/modules/postgres-etl/extract/extract_iam.tf
@@ -197,7 +197,10 @@ resource "aws_iam_policy" "eks_paas_jenkins_trigger_sfn" {
     Statement = [
       {
         Effect   = "Allow",
-        Action   = "states:StartExecution",
+        Action   = [
+          "states:DescribeExecution",
+          "states:StartExecution",
+        ],
         Resource = aws_sfn_state_machine.rds_to_s3.arn
       }
     ]