Add ELT metadata bucket to redshift serverless policy (#550)

govuk-one-login · Feb 8, 2024 · 145210a · 145210a
1 parent 85e2e61
commit 145210a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/iac/main/resources/redshift.yml b/iac/main/resources/redshift.yml
@@ -29,6 +29,8 @@ IAMRoleRedshiftServerless:
                 - !Sub 'arn:aws:s3:::${RawLayerBucket}/*'
                 - !Sub 'arn:aws:s3:::${StageLayerBucket}'
                 - !Sub 'arn:aws:s3:::${StageLayerBucket}/*'
+                - !Sub 'arn:aws:s3:::${ELTMetadataBucket}'
+                - !Sub 'arn:aws:s3:::${ELTMetadataBucket}/*'
             - Effect: Allow
               Resource: !Sub arn:aws:glue:eu-west-2:${AWS::AccountId}:*
               Action: