Merge pull request #31 from ministryofjustice/update-elasticache-access

update elasticache access for users
ministryofjustice · Feb 15, 2024 · e16cb6d · e16cb6d
2 parents 6e97438 + 78b4747
commit e16cb6d
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -53,6 +53,7 @@ No modules.
 | [aws_iam_policy_document.cloudwatch_for_github](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_iam_policy_document.cognito_idp_for_github](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_iam_policy_document.combined](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
+| [aws_iam_policy_document.elasticache_for_github](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_iam_policy_document.federated_role_trust_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_iam_policy_document.iam_for_github](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
 | [aws_iam_policy_document.kms_for_github](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

diff --git a/aws.tf b/aws.tf
@@ -53,6 +53,7 @@ data "aws_iam_policy_document" "combined" {
     data.aws_iam_policy_document.sqs_for_github.json,
     data.aws_iam_policy_document.vpc_for_github.json,
     data.aws_iam_policy_document.secretsmanager_for_github.json,
+    data.aws_iam_policy_document.elasticache_for_github.json,
   ]
 }
 

diff --git a/elasticache.tf b/elasticache.tf
@@ -0,0 +1,11 @@
+data "aws_iam_policy_document" "elasticache_for_github" {
+  statement {
+    sid    = "AllowElastiCacheListDescribe"
+    effect = "Allow"
+    actions = [
+      "elasticache:Describe*",
+      "elasticache:List*",
+    ]
+    resources = ["*"]
+  }
+}