Give TRE role read access to standard s3 export bucket

nationalarchives · Oct 12, 2023 · db97ac1 · db97ac1
1 parent 88522f1
commit db97ac1
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/da-terraform-modules b/da-terraform-modules
diff --git a/root.tf b/root.tf
@@ -487,10 +487,12 @@ module "export_step_function" {
 }
 
 module "export_bucket" {
-  source      = "./tdr-terraform-modules/s3"
-  project     = var.project
-  function    = "consignment-export"
-  common_tags = local.common_tags
+  source        = "./tdr-terraform-modules/s3"
+  project       = var.project
+  function      = "consignment-export"
+  common_tags   = local.common_tags
+  tre_role_arn  = local.tre_export_role_arn
+  bucket_policy = "export_bucket"
 }
 
 module "export_bucket_judgment" {
+20 −5		s3/main.tf
+20 −0		s3/templates/default_bucket_policy.json.tpl
+5 −0		s3/variables.tf