add missing permissions + prod_code (#124)

in4it · Jul 18, 2024 · 340d8a1 · 340d8a1
1 parent 6cad1a8
commit 340d8a1
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/terraform/ecs-deploy.tf b/terraform/ecs-deploy.tf
@@ -56,6 +56,7 @@ locals {
     APPMESH_NAME          = var.ecs_deploy_appmesh_name
     APPMESH_ENVOY_RELEASE = var.ecs_deploy_appmesh_release
     ECS_WHITELIST         = var.ecs_whitelist
+    PROD_CODE             = var.prod_code
 
     ECS_DEPLOY_CPU                = var.ecs_deploy_cpu
     ECS_DEPLOY_MEMORY_RESERVATION = var.ecs_deploy_memory_reservation
@@ -245,6 +246,13 @@ resource "aws_iam_role_policy" "ecs-deploy-policy" {
         "arn:aws:dynamodb:${var.aws_region}:${data.aws_caller_identity.current.account_id}:table/ecs-deploy",
         "arn:aws:dynamodb:${var.aws_region}:${data.aws_caller_identity.current.account_id}:table/ecs-deploy/*"
       ]
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "aws-marketplace:RegisterUsage"
+      ],
+      "Resource": "*"
     }
   ]
 }

diff --git a/terraform/templates/ecs-deploy.json b/terraform/templates/ecs-deploy.json
@@ -39,6 +39,10 @@
       {
         "name": "ECS_WHITELIST",
         "value": "${ECS_WHITELIST}"
+      },
+      {
+        "name": "PROD_CODE",
+        "value": "${PROD_CODE}"
       }
     ]
   }

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -227,6 +227,10 @@ variable "ecs_whitelist" {
   default = "0.0.0.0/0"
 }
 
+variable "prod_code" {
+  default = "3x0v7m3npdgzaiw2f8lwsgju5"
+}
+
 variable "ecs_ecr_scan_on_push" {
   default = "false"
 }