including assume role allow

ministryofjustice · Dec 21, 2023 · 013a9cb · 013a9cb
1 parent 203efd8
commit 013a9cb
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/test/unit-test/main.tf b/test/unit-test/main.tf
@@ -97,6 +97,7 @@ data "aws_iam_policy_document" "AWSLambdaVPCAccessExecutionRole" {
       "ec2:DeleteNetworkInterface",
       "ec2:AssignPrivateIpAddresses",
       "ec2:UnassignPrivateIpAddresses",
+      "sts:AssumeRole",
     ]
     resources = [
       format("arn:aws:ec2:eu-west-2:%s:vpc/${data.aws_vpc.platforms-test.id}/*", data.aws_caller_identity.current.account_id)