Data analytics ADM role fix (#809)

Add IaC to allow secure pipelines deploy role to modify data analytics ADM role
govuk-one-login · May 22, 2024 · 467107a · 467107a
1 parent d1e42af
commit 467107a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/iac/main/resources/pipeline.yml b/iac/main/resources/pipeline.yml
@@ -62,6 +62,10 @@ DeployRoleExtraIAMActions:
             - !Sub 'arn:aws:iam::${AWS::AccountId}:instance-profile/${Environment}*'
             - !Sub 'arn:aws:iam::${AWS::AccountId}:role/LambdaExecutionRole'
             - !Sub 'arn:aws:iam::${AWS::AccountId}:role/*DeployRole*'
+            - !If
+              - IsProduction
+              - !Sub 'arn:aws:iam::${AWS::AccountId}:role/data-analytics-adm-redshift-role'
+              - !Ref AWS::NoValue
     Roles:
       - Fn::If:
           - IsDev