NOBUG: Update db role. (#271)

bcgov · Oct 30, 2023 · b029f39 · b029f39
1 parent fb55174
commit b029f39
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/terraform/src/roles.tf b/terraform/src/roles.tf
@@ -82,7 +82,10 @@ resource "aws_iam_role_policy" "databaseReadRolePolicy" {
             "dynamodb:Update*",
             "dynamodb:PutItem"
         ],
-        "Resource": "${aws_dynamodb_table.ar_table.arn}"
+        "Resource": [
+          "${aws_dynamodb_table.ar_table_name_cache.arn}/*",
+          "${aws_dynamodb_table.ar_table.arn}/*"
+        ]
       },
       {
         "Effect": "Allow",