Add more permissions to DevOps role in order try out more AWS services

apps-devstg/base-identities/service_linked_roles.tf

@@ -0,0 +1,13 @@
+#
+# Many AWS services require that a Service Linked Role is created before you
+# proceed to creating some resources.
+# Typically when you create such resources through the AWS console, Service
+# Linked Roles are automatically created for you -- although that depends on
+# your permissions at the moment.
+# Now, that won't work if you try to create the resources through the AWS CLI
+# or Terraform. For those cases you may need to create the roles explicitly.
+#
+
+resource "aws_iam_service_linked_role" "ecs" {
+  aws_service_name = "ecs.amazonaws.com"
+}

network/base-identities/policies.tf

@@ -68,6 +68,7 @@ resource "aws_iam_policy" "devops_access" {
                 "sns:*",
                 "sqs:*",
                 "ssm:*",
+                "sts:*",
                 "support:*",
                 "tag:*",
                 "trustedadvisor:*",

shared/base-identities/policies.tf

@@ -23,7 +23,9 @@ resource "aws_iam_policy" "devops_access" {
                 "acm:*",
                 "athena:*",
                 "autoscaling:*",
+                "appconfig:*",
                 "application-autoscaling:*",
+                "apprunner:*",
                 "apigateway:*",
                 "aws-portal:*",
                 "aws-marketplace:*",
@@ -44,6 +46,7 @@ resource "aws_iam_policy" "devops_access" {
                 "ecr-public:*",
                 "ecs:*",
                 "eks:*",
+                "elasticbeanstalk:*",
                 "elasticloadbalancing:*",
                 "es:*",
                 "events:*",
@@ -53,6 +56,7 @@ resource "aws_iam_policy" "devops_access" {
                 "iam:*",
                 "kms:*",
                 "lambda:*",
+                "lightsail:*",
                 "logs:*",
                 "ram:*",
                 "rds:*",