From d586d9b8f95fb8d180b736c46cfc7377720e1aa1 Mon Sep 17 00:00:00 2001
From: Vladimirs Kovalovs <vladimirs.kovalovs@digital.justice.gov.uk>
Date: Thu, 5 Dec 2024 23:42:26 +0000
Subject: [PATCH] [TM-805] minor change

---
 terraform/environments/oas/ec2.tf | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/terraform/environments/oas/ec2.tf b/terraform/environments/oas/ec2.tf
index e0b431ee3e0..5acdea7dfa1 100644
--- a/terraform/environments/oas/ec2.tf
+++ b/terraform/environments/oas/ec2.tf
@@ -241,9 +241,8 @@ resource "aws_iam_instance_profile" "ec2_instance_profile" {
 }
 
 resource "aws_iam_role" "ec2_instance_role" {
-  name                = "${local.application_name}-role"
-  managed_policy_arns = ["arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"]
-  assume_role_policy  = <<EOF
+  name               = "${local.application_name}-role"
+  assume_role_policy = <<EOF
 {
     "Version": "2012-10-17",
     "Statement": [
@@ -259,6 +258,11 @@ resource "aws_iam_role" "ec2_instance_role" {
 EOF
 }
 
+resource "aws_iam_role_policy_attachment" "ec2_instance_role_attachment" {
+  role       = aws_iam_role.ec2_instance_role.name
+  policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+}
+
 resource "aws_iam_role_policy" "ec2_instance_policy" {
   #tfsec:ignore:aws-iam-no-policy-wildcards
   name = "${local.application_name}-ec2-policy"