From 1cb831cd0a64c24c6d9637f89536227c226b931c Mon Sep 17 00:00:00 2001
From: Bill Buchan <bill.buchan@digital.justice.gov.uk>
Date: Thu, 19 Dec 2024 15:40:35 +0000
Subject: [PATCH] StartBackupJob takes no resource

---
 .../modules/components/oracle_db_shared/backup_vault.tf      | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/terraform/environments/delius-core/modules/components/oracle_db_shared/backup_vault.tf b/terraform/environments/delius-core/modules/components/oracle_db_shared/backup_vault.tf
index 5b9d49e3e9c..c1d57e605bf 100644
--- a/terraform/environments/delius-core/modules/components/oracle_db_shared/backup_vault.tf
+++ b/terraform/environments/delius-core/modules/components/oracle_db_shared/backup_vault.tf
@@ -27,10 +27,13 @@ resource "aws_iam_policy" "oracle_ec2_snapshot_backup_role_policy" {
         Action   = "iam:PassRole",
         Resource = "arn:aws:iam::${var.account_info.id}:role/service-role/AWSBackupDefaultServiceRole"
       },
+      {
+        Effect  = "Allow"
+        Action  = ["backup:StartBackupJob"]
+      },
       {
         Effect  = "Allow"
         Action  = ["backup:ListBackupVaults",
-                   "backup:StartBackupJob",
                    "backup:DescribeBackupJob",
                    "ec2:DescribeSnapshots"],
         Resource = "*"