Merge pull request #1249 from alphagov/samsimpson1/big-import

Allow the TFC role to do iam:PassRole to S3 services
alphagov · Apr 17, 2024 · 0a7b5ef · 0a7b5ef
2 parents b5f4bbe + 456a50e
commit 0a7b5ef
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/terraform/deployments/tfc-aws-config/main.tf b/terraform/deployments/tfc-aws-config/main.tf
@@ -88,7 +88,10 @@ data "aws_iam_policy_document" "tfc_policy" {
     condition {
       test     = "StringEquals"
       variable = "iam:PassedToService"
-      values   = ["eks.amazonaws.com"]
+      values = [
+        "eks.amazonaws.com",
+        "s3.amazonaws.com"
+      ]
     }
   }
   statement {