fix: Add missing environment pipeline permission (#297)

uktrade · Nov 29, 2024 · 57f4ea1 · 57f4ea1
1 parent 96b5935
commit 57f4ea1
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/environment-pipelines/iam.tf b/environment-pipelines/iam.tf
@@ -847,6 +847,13 @@ data "aws_iam_policy_document" "cloudformation" {
       "arn:aws:cloudformation:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:stackset/${var.application}-infrastructure:*",
     ]
   }
+
+  statement {
+    actions = [
+      "cloudformation:ListExports"
+    ]
+    resources = ["*"]
+  }
 }
 
 resource "aws_iam_policy" "cloudformation" {