give engine permission to read and write necessary s3 buckets

infrastructure/terraform/lambda/engine/main.tf

@@ -67,4 +67,8 @@ module "lambda" {
   )
 }
 
-# Policies and IAM
+# Policies and IAM
+resource "aws_iam-role_policy_attachment" "engine_s3_read_and_write" {
+  role = module.lambda.role_name
+  policy_arn = data.terraform_remote_state.shared.outputs.engine_s3_read_and_write_arn
+}