DSOS-2447: add ssm:StartSession (#4415)

* add ssm:StartSession * missing permission
ministryofjustice · Jan 2, 2024 · 7360e05 · 7360e05
1 parent c371d02
commit 7360e05
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/terraform/environments/hmpps-oem/locals.tf b/terraform/environments/hmpps-oem/locals.tf
@@ -44,10 +44,12 @@ locals {
       description = "Permissions for the db refresh process"
       statements = [
         {
-          sid    = "DescribeInstances"
+          sid    = "InstanceAccess"
           effect = "Allow"
           actions = [
             "ec2:DescribeInstances",
+            "ssm:StartSession",
+            "ssm:TerminateSession"
           ]
           resources = [
             "*",