diff --git a/infrastructure/terraform/modules/lambda_sqs_trigger/main.tf b/infrastructure/terraform/modules/lambda_sqs_trigger/main.tf index 0cf9a353..5919e10f 100644 --- a/infrastructure/terraform/modules/lambda_sqs_trigger/main.tf +++ b/infrastructure/terraform/modules/lambda_sqs_trigger/main.tf @@ -5,4 +5,19 @@ resource "aws_lambda_event_source_mapping" "this" { enabled = true } +resource "aws_iam_role_policy" "allow_sqs" { + role = var.lambda_role_name + policy = jsonencode({ + Version = "2012-10-17" + Statement = [{ + Effect = "Allow" + Action = [ + "sqs:ReceiveMessage", + "sqs:DeleteMessage", + "sqs:GetQueueAttributes" + ] + Resource = var.queue_arn + }] + }) +}