junte/Model
1
0
Fork 0
mirror of https://github.com/Hestia-Homes/Model.git synced 2026-06-08 11:17:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

sqs permissions

Browse source
This commit is contained in:
Daniel Roth 2026-03-10 14:59:46 +00:00
parent 891ccd4a8b
commit f3d51c4c7c
1 changed files with 26 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
infrastructure/terraform/lambda/fast-api/main.tf
View file

@ -120,12 +120,36 @@ module "fastapi" {
############################################
# IAM policy attachments
############################################
resource "aws_iam_role_policy_attachment" "fastapi_s3_read" {
resource "aws_iam_role_policy_attachment" "fast_api_s3_read" {
role = module.fastapi.role_name
policy_arn = data.terraform_remote_state.shared.outputs.fast_api_s3_read_arn
}
module "fastapi_sqs_policy" {
source = "../../modules/generic_iam_policy"
policy_name = "fastapi-sqs-send-${var.stage}"
policy_description = "Allow FastAPI to send messages to engine & categorisation queues"
actions = [
"sqs:SendMessage"
]
resources = [
data.terraform_remote_state.engine.outputs.ara_engine_queue_arn,
data.terraform_remote_state.categorisation.outputs.categorisation_queue_arn
]
conditions = null
tags = {
Service = "fastapi"
Stage = var.stage
}
}
resource "aws_iam_role_policy_attachment" "fastapi_sqs_send" {
role = module.fastapi.role_name
policy_arn = data.terraform_remote_state.shared.outputs.fast_api_sqs_send_arn
policy_arn = module.fastapi_sqs_policy.policy_arn
}