[TM-805] minor change

ministryofjustice · Dec 5, 2024 · d586d9b · d586d9b
1 parent 562ea4a
commit d586d9b
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/terraform/environments/oas/ec2.tf b/terraform/environments/oas/ec2.tf
@@ -241,9 +241,8 @@ resource "aws_iam_instance_profile" "ec2_instance_profile" {
 }
 
 resource "aws_iam_role" "ec2_instance_role" {
-  name                = "${local.application_name}-role"
-  managed_policy_arns = ["arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"]
-  assume_role_policy  = <<EOF
+  name               = "${local.application_name}-role"
+  assume_role_policy = <<EOF
 {
     "Version": "2012-10-17",
     "Statement": [
@@ -259,6 +258,11 @@ resource "aws_iam_role" "ec2_instance_role" {
 EOF
 }
 
+resource "aws_iam_role_policy_attachment" "ec2_instance_role_attachment" {
+  role       = aws_iam_role.ec2_instance_role.name
+  policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+}
+
 resource "aws_iam_role_policy" "ec2_instance_policy" {
   #tfsec:ignore:aws-iam-no-policy-wildcards
   name = "${local.application_name}-ec2-policy"