Merge pull request #551 from NHSDigital/ELI-597

(ELI-597) final extra permission

Author: TOEL2

infrastructure/stacks/api-layer/step_functions.tf

@@ -106,10 +106,10 @@ INSTRUCTIONS:
 2. Ensure the new hashes are working as expected.
 3. Run the command below to approve and resume the workflow:
 
-aws stepfunctions send-task-success --task-token {} --task-output \\{\\}
+aws stepfunctions send-task-success --task-token {} --task-output {}
 
 ======================================================
-', $$.Task.Token)
+', $$.Task.Token, '{}')
 EOT
 
   delete_jobs_message = <<EOT
@@ -128,10 +128,10 @@ INSTRUCTIONS:
 2. Ensure the old hashes have been removed successfully.
 3. Run the command below to approve and resume the workflow:
 
-aws stepfunctions send-task-success --task-token {} --task-output \\{\\}
+aws stepfunctions send-task-success --task-token {} --task-output {}
 
 ======================================================
-', $$.Task.Token)
+', $$.Task.Token, '{}')
 EOT
 
   failure_message = <<EOT

infrastructure/stacks/iams-developer-roles/github_actions_policies.tf

@@ -458,6 +458,7 @@ resource "aws_iam_policy" "api_infrastructure" {
           "arn:aws:wafv2:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:regional/webacl/*",
           "arn:aws:wafv2:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:regional/managedruleset/*",
           "arn:aws:states:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:stateMachine:*",
+          "arn:aws:events:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:rule/*"
         ]
       },
     ]