Merge pull request #548 from NHSDigital/ELI-597

TOEL2 · web-flow · commit b0e69fcd7acf · 2026-01-18T06:06:38.000Z
ELI-597: Adds update state machine permission
diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -433,7 +433,8 @@ resource "aws_iam_policy" "api_infrastructure" {
           "states:ListTagsForResource",
           "states:ValidateStateMachineDefinition",
           "states:CreateStateMachine",
-          "states:TagResource"
+          "states:TagResource",
+          "states:UpdateStateMachine",
         ],
 
 
diff --git a/infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf b/infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf
@@ -218,7 +218,8 @@ data "aws_iam_policy_document" "permissions_boundary" {
       "states:ListTagsForResource",
       "states:ValidateStateMachineDefinition",
       "states:CreateStateMachine",
-      "states:TagResource"
+      "states:TagResource",
+      "states:UpdateStateMachine",
     ]
 
     resources = ["*"]

Original file line number	Diff line number	Diff line change
`@@ -218,7 +218,8 @@ data "aws_iam_policy_document" "permissions_boundary" {`
`218`	`218`	`"states:ListTagsForResource",`
`219`	`219`	`"states:ValidateStateMachineDefinition",`
`220`	`220`	`"states:CreateStateMachine",`
`221`		`- "states:TagResource"`
	`221`	`+ "states:TagResource",`
	`222`	`+ "states:UpdateStateMachine",`
`222`	`223`	`]`
`223`	`224`
`224`	`225`	`resources = ["*"]`