eli-204 adding kms decrypt permissions

eddalmond1 · eddalmond1 · commit b64dd9244faf · 2025-05-29T11:15:47.000+01:00
diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -60,6 +60,7 @@ resource "aws_iam_policy" "api_infrastructure" {
           "kms:Describe*",
           "kms:GetKeyPolicy*",
           "kms:GetKeyRotationStatus",
+          "kms:Decrypt*",
 
           # Cloudwatch permissions
           "logs:Describe*",
