add blob perm

pagopa · Dec 3, 2024 · 093c805 · 093c805
1 parent d022802
commit 093c805
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/infra/resources/_modules/web_apps/op_func.tf b/infra/resources/_modules/web_apps/op_func.tf
@@ -58,6 +58,12 @@ resource "azurerm_role_assignment" "config_queue_op_func" {
   principal_id         = module.op_func.function_app.function_app.principal_id
 }
 
+resource "azurerm_role_assigment" "audit_event_container_op_func" {
+  scope                = var.audit_storage.id
+  role_definition_name = "Storage Blob Data Contributor"
+  principal_id         = module.op_func.function_app.function_app.principal_id
+}
+
 resource "azurerm_cosmosdb_sql_role_assignment" "op_func" {
   resource_group_name = data.azurerm_cosmosdb_account.fims.resource_group_name
   account_name        = data.azurerm_cosmosdb_account.fims.name