Merge pull request #30 from ministryofjustice/add-cognito

Add wafv2 and SMS permissions to cognito pool
ministryofjustice · Jan 22, 2024 · 6e97438 · 6e97438
2 parents 23b82ef + ac5ab08
commit 6e97438
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/cognito-idp.tf b/cognito-idp.tf
@@ -3,7 +3,8 @@ data "aws_iam_policy_document" "cognito_idp_for_github" {
     sid    = "AllowCognitoList"
     effect = "Allow"
     actions = [
-      "cognito-idp:ListUserPools"
+      "cognito-idp:ListUserPools",
+      "cognito-idp:DescribeUserPoolDomain"
     ]
     resources = ["*"]
   }
@@ -14,7 +15,9 @@ data "aws_iam_policy_document" "cognito_idp_for_github" {
     actions = [
       "cognito-idp:List*",
       "cognito-idp:Describe*",
-      "cognito-idp:Get*"
+      "cognito-idp:Get*",
+      "wafv2:GetWebACLForResource",
+      "SNS:GetSMSSandboxAccountStatus"
     ]
     resources = [
       "arn:aws:cognito-idp:*:${data.aws_caller_identity.current.account_id}:userpool/*",