eli-204 amending permissions boundary assignment

eddalmond1 · eddalmond1 · commit 71033eb48ea1 · 2025-05-29T10:20:11.000+01:00
diff --git a/infrastructure/stacks/api-layer/iam_roles.tf b/infrastructure/stacks/api-layer/iam_roles.tf
@@ -26,12 +26,12 @@ data "aws_iam_policy_document" "dps_assume_role" {
 resource "aws_iam_role" "eligibility_lambda_role" {
   name                 = "eligibility_lambda-role${terraform.workspace == "default" ? "" : "-${terraform.workspace}"}"
   assume_role_policy   = data.aws_iam_policy_document.lambda_assume_role.json
-  permissions_boundary = data.aws_iam_policy.assumed_role_permissions_boundary.arn
+  permissions_boundary = aws_iam_policy.assumed_role_permissions_boundary.arn
 }
 
 
 resource "aws_iam_role" "write_access_role" {
   name                 = "external-write-role-${terraform.workspace == "default" ? "" : "-${terraform.workspace}"}"
   assume_role_policy   = data.aws_iam_policy_document.dps_assume_role.json
-  permissions_boundary = data.aws_iam_policy.assumed_role_permissions_boundary.arn
+  permissions_boundary = aws_iam_policy.assumed_role_permissions_boundary.arn
 }

Original file line number	Diff line number	Diff line change
`@@ -26,12 +26,12 @@ data "aws_iam_policy_document" "dps_assume_role" {`
`26`	`26`	`resource "aws_iam_role" "eligibility_lambda_role" {`
`27`	`27`	`name = "eligibility_lambda-role${terraform.workspace == "default" ? "" : "-${terraform.workspace}"}"`
`28`	`28`	`assume_role_policy = data.aws_iam_policy_document.lambda_assume_role.json`
`29`		`- permissions_boundary = data.aws_iam_policy.assumed_role_permissions_boundary.arn`
	`29`	`+ permissions_boundary = aws_iam_policy.assumed_role_permissions_boundary.arn`
`30`	`30`	`}`
`31`	`31`
`32`	`32`
`33`	`33`	`resource "aws_iam_role" "write_access_role" {`
`34`	`34`	`name = "external-write-role-${terraform.workspace == "default" ? "" : "-${terraform.workspace}"}"`
`35`	`35`	`assume_role_policy = data.aws_iam_policy_document.dps_assume_role.json`
`36`		`- permissions_boundary = data.aws_iam_policy.assumed_role_permissions_boundary.arn`
	`36`	`+ permissions_boundary = aws_iam_policy.assumed_role_permissions_boundary.arn`
`37`	`37`	`}`