From e21252fa65d5aca931af2e7d330be8790897417e Mon Sep 17 00:00:00 2001
From: TOEL2 <tom.eldridge1@nhs.net>
Date: Fri, 10 Apr 2026 12:59:31 +0100
Subject: [PATCH] [ELI-702] final missing perm

---
 .../stacks/iams-developer-roles/github_actions_policies.tf     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
index b3263ac1..0610134e 100644
--- a/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
+++ b/infrastructure/stacks/iams-developer-roles/github_actions_policies.tf
@@ -553,7 +553,8 @@ resource "aws_iam_policy" "security_management" {
           "lambda:GetCodeSigningConfig",
           "lambda:ListCodeSigningConfigs",
           "lambda:GetFunctionCodeSigningConfig",
-          "lambda:ListTags"
+          "lambda:ListTags",
+          "lambda:TagResource",
         ],
         Resource = "*"
       },