Add DLP Service Agent role

GoogleCloudPlatform · Nov 20, 2023 · 65c0786 · 65c0786
1 parent 543ea6e
commit 65c0786
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/blueprints/data-solutions/data-platform-minimal/04-common.tf b/blueprints/data-solutions/data-platform-minimal/04-common.tf
@@ -39,6 +39,7 @@ locals {
     "roles/datacatalog.categoryFineGrainedReader" = [
       module.processing-sa-0.iam_email
     ]
+    "roles/dlp.serviceAgent" = ["serviceAccount:${module.common-project.service_accounts.robots.dlp}"]
   }
   # this only works because the service account module uses a static output
   iam_cmn_additive = {

diff --git a/blueprints/data-solutions/data-platform-minimal/README.md b/blueprints/data-solutions/data-platform-minimal/README.md
@@ -229,7 +229,7 @@ module "data-platform" {
   prefix = "myprefix"
 }
 
-# tftest modules=23 resources=138
+# tftest modules=23 resources=139
 ```
 
 ## Customizations