Allow glue:TagResource

ministryofjustice · Oct 15, 2024 · 859c1ff · 859c1ff
1 parent c3787a3
commit 859c1ff
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/terraform/environments/electronic-monitoring-data/glue_iam.tf b/terraform/environments/electronic-monitoring-data/glue_iam.tf
@@ -110,6 +110,17 @@ resource "aws_iam_policy" "glue_user_restricted_notebook_service_role_iam_policy
                 "*"
             ]
         },
+        {
+            "Sid": "NotebookAllowActions4",
+            "Effect": "Allow",
+            "Action": [
+                "glue:TagResource",
+                "glue:UntagResource"
+            ],
+            "Resource": [
+                "*"
+            ]
+        },
         {
             "Sid": "NotebookDenyActions",
             "Effect": "Deny",