From 8a569e5454739af170d6e8d7883bf03d6a65f258 Mon Sep 17 00:00:00 2001
From: Dominic Robinson <65237317+drobinson-moj@users.noreply.github.com>
Date: Mon, 22 Jan 2024 16:38:04 +0000
Subject: [PATCH] DSOS-2542: enable rds secrets role (#4644)

* enable role for sharing of domain secrets

* Add missing permission

* removing unnecessary permission
---
 terraform/environments/corporate-staff-rostering/locals.tf | 1 +
 terraform/environments/planetfm/locals.tf                  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/terraform/environments/corporate-staff-rostering/locals.tf b/terraform/environments/corporate-staff-rostering/locals.tf
index c6c062a6815..1174d2a58f2 100644
--- a/terraform/environments/corporate-staff-rostering/locals.tf
+++ b/terraform/environments/corporate-staff-rostering/locals.tf
@@ -14,6 +14,7 @@ locals {
     enable_application_environment_wildcard_cert = false
     enable_backup_plan_daily_and_weekly          = true
     enable_business_unit_kms_cmks                = true
+    enable_hmpps_domain                          = true
     enable_image_builder                         = true
     enable_ec2_cloud_watch_agent                 = true
     enable_ec2_self_provision                    = true
diff --git a/terraform/environments/planetfm/locals.tf b/terraform/environments/planetfm/locals.tf
index 42b60f610fa..c50450650c1 100644
--- a/terraform/environments/planetfm/locals.tf
+++ b/terraform/environments/planetfm/locals.tf
@@ -14,6 +14,7 @@ locals {
     enable_application_environment_wildcard_cert = false
     enable_backup_plan_daily_and_weekly          = true
     enable_business_unit_kms_cmks                = true
+    enable_hmpps_domain                          = true
     enable_image_builder                         = true
     enable_ec2_cloud_watch_agent                 = true
     enable_ec2_self_provision                    = true