Adding pg permissions

ministryofjustice · Feb 23, 2024 · 2aba153 · 2aba153
1 parent c3287e4
commit 2aba153
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -275,11 +275,11 @@ data "aws_iam_policy_document" "irsa" {
     effect = "Allow"
     actions = [
       "rds:CreateDBInstanceReadReplica",
-      local.db_pg_arn,
     ]
 
     resources = [
-      "arn:aws:rds:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:db:*"
+      "arn:aws:rds:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:db:*",
+      local.db_pg_arn
     ]
   }
 }