diff --git a/infrastructure/stacks/api-layer/step_functions.tf b/infrastructure/stacks/api-layer/step_functions.tf
index ea40a8c78..199ff6dc2 100644
--- a/infrastructure/stacks/api-layer/step_functions.tf
+++ b/infrastructure/stacks/api-layer/step_functions.tf
@@ -106,10 +106,10 @@ INSTRUCTIONS:
 2. Ensure the new hashes are working as expected.
 3. Run the command below to approve and resume the workflow:
 
-aws stepfunctions send-task-success --task-token {} --task-output \\{\\}
+aws stepfunctions send-task-success --task-token {} --task-output {}
 
 ======================================================
-', $$.Task.Token)
+', $$.Task.Token, '{}')
 EOT
 
   delete_jobs_message = <<EOT
@@ -128,10 +128,10 @@ INSTRUCTIONS:
 2. Ensure the old hashes have been removed successfully.
 3. Run the command below to approve and resume the workflow:
 
-aws stepfunctions send-task-success --task-token {} --task-output \\{\\}
+aws stepfunctions send-task-success --task-token {} --task-output {}
 
 ======================================================
-', $$.Task.Token)
+', $$.Task.Token, '{}')
 EOT
 
   failure_message = <<EOT
diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
index c3d70b92f..1bcaf2145 100644
--- a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
+++ b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -458,6 +458,7 @@ resource "aws_iam_policy" "api_infrastructure" {
           "arn:aws:wafv2:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:regional/webacl/*",
           "arn:aws:wafv2:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:regional/managedruleset/*",
           "arn:aws:states:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:stateMachine:*",
+          "arn:aws:events:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:rule/*"
         ]
       },
     ]