if you change the descript it destories and make a new one instead of edit

This commit is contained in:
Jun-te Kim 2026-06-02 09:36:31 +00:00
parent 04dc1b20fe
commit f3ad339cf5

View file

@ -512,8 +512,12 @@ module "landlord_description_overrides_registry" {
module "landlord_overrides_s3_read" {
source = "../modules/s3_iam_policy"
policy_name = "LandlordOverridesReadS3"
policy_description = "Allow landlord description overrides Lambda to read the original upload CSV from retrofit-plan-inputs (and retrofit-data) bucket"
policy_name = "LandlordOverridesReadS3"
# NOTE: aws_iam_policy.description is ForceNew changing it destroys+recreates the
# policy, which deadlocks because the policy is attached to the lambda role in the
# separate landlordDescriptionOverrides stack (DeleteConflict). Keep this string
# byte-for-byte identical to what's in state so the bucket change applies in-place.
policy_description = "Allow landlord description overrides Lambda to read from retrofit-data bucket"
bucket_arns = [
"arn:aws:s3:::retrofit-plan-inputs-${var.stage}",
"arn:aws:s3:::retrofit-data-${var.stage}",