associate rds role

ministryofjustice · Dec 13, 2023 · 6555937 · 6555937
1 parent 9e9695b
commit 6555937
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/terraform/environments/cdpt-chaps/database.tf b/terraform/environments/cdpt-chaps/database.tf
@@ -11,8 +11,12 @@ resource "aws_db_instance" "database" {
 	identifier = local.application_data.accounts[local.environment].db_instance_identifier
 	username = local.application_data.accounts[local.environment].db_user
 	password = data.aws_secretsmanager_secret_version.db_password.secret_string
-	iam_role_arn = aws_iam_role.S3_db_backup_restore_access.arn
+}
 
+resource "aws_db_instance_role_association" "database" {
+  db_instance_identifier = aws_db_instance.database.identifier
+  feature_name           = "S3_INTEGRATION"
+  role_arn               = aws_iam_role.S3_db_backup_restore_access.arn
 }
 
 output "s3_db_backup_restore_access_role_arn" {