Add opensearch permissions to meadow role

nulib · Nov 11, 2024 · 1887a60 · 1887a60
1 parent 6127cb8
commit 1887a60
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/infrastructure/deploy/ecs.tf b/infrastructure/deploy/ecs.tf
@@ -42,6 +42,13 @@ data "aws_iam_policy_document" "meadow_role_permissions" {
     resources = ["*"]
   }
 
+  statement {
+    sid       = "opensearchhttp"
+    effect    = "Allow"
+    actions   = ["es:ESHttp*"]
+    resources = ["*"]
+  }
+
   statement {
     sid       = "secretsmanager"
     effect    = "Allow"