From dbca2c1601a0de506b72c655e8f42b252d2a0834 Mon Sep 17 00:00:00 2001
From: W <willg258@hotmail.co.uk>
Date: Fri, 29 Dec 2023 17:14:18 +0000
Subject: [PATCH] add oasys db permissions

add oasys db permissions
---
 terraform/environments/oasys/locals.tf | 1 +
 terraform/environments/oasys/main.tf   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/terraform/environments/oasys/locals.tf b/terraform/environments/oasys/locals.tf
index 4903318b5bd..5f2f87d3bd0 100644
--- a/terraform/environments/oasys/locals.tf
+++ b/terraform/environments/oasys/locals.tf
@@ -119,6 +119,7 @@ locals {
       availability_zone = "${local.region}a"
       instance_profile_policies = flatten([
         module.baseline_presets.ec2_instance.config.db.instance_profile_policies,
+        "Ec2OracleEnterpriseManagerPolicy"
       ])
     })
     instance = merge(module.baseline_presets.ec2_instance.instance.default_db, {
diff --git a/terraform/environments/oasys/main.tf b/terraform/environments/oasys/main.tf
index 6b2194dd764..db95b346127 100644
--- a/terraform/environments/oasys/main.tf
+++ b/terraform/environments/oasys/main.tf
@@ -38,7 +38,7 @@ module "baseline_presets" {
     db_backup_s3                                 = true # adds db backup buckets
     iam_policies_ec2_default                     = ["EC2S3BucketWriteAndDeleteAccessPolicy", "ImageBuilderS3BucketWriteAndDeleteAccessPolicy"]
     s3_iam_policies                              = ["EC2S3BucketWriteAndDeleteAccessPolicy"]
-    iam_policies_filter                          = ["ImageBuilderS3BucketWriteAndDeleteAccessPolicy"]
+    iam_policies_filter                          = ["ImageBuilderS3BucketWriteAndDeleteAccessPolicy", "Ec2OracleEnterpriseManagerPolicy"]
 
     sns_topics = {
       pagerduty_integrations = {