Merge pull request #4408 from ministryofjustice/oasys-add-oracle-ente…

…rprise-managed-server add oasys db permissions
ministryofjustice · Jan 2, 2024 · c371d02 · c371d02
2 parents dc3059f + dbca2c1
commit c371d02
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/terraform/environments/oasys/locals.tf b/terraform/environments/oasys/locals.tf
@@ -119,6 +119,7 @@ locals {
       availability_zone = "${local.region}a"
       instance_profile_policies = flatten([
         module.baseline_presets.ec2_instance.config.db.instance_profile_policies,
+        "Ec2OracleEnterpriseManagerPolicy"
       ])
     })
     instance = merge(module.baseline_presets.ec2_instance.instance.default_db, {

diff --git a/terraform/environments/oasys/main.tf b/terraform/environments/oasys/main.tf
@@ -38,7 +38,7 @@ module "baseline_presets" {
     db_backup_s3                                 = true # adds db backup buckets
     iam_policies_ec2_default                     = ["EC2S3BucketWriteAndDeleteAccessPolicy", "ImageBuilderS3BucketWriteAndDeleteAccessPolicy"]
     s3_iam_policies                              = ["EC2S3BucketWriteAndDeleteAccessPolicy"]
-    iam_policies_filter                          = ["ImageBuilderS3BucketWriteAndDeleteAccessPolicy"]
+    iam_policies_filter                          = ["ImageBuilderS3BucketWriteAndDeleteAccessPolicy", "Ec2OracleEnterpriseManagerPolicy"]
 
     sns_topics = {
       pagerduty_integrations = {