add batch:TagResource to IAM role (#59)

oavdeev · web-flow · commit 4e56010f1c2a · 2023-05-03T12:13:08.000-07:00
diff --git a/modules/step-functions/iam-step-functions.tf b/modules/step-functions/iam-step-functions.tf
@@ -22,7 +22,8 @@ data "aws_iam_policy_document" "step_functions_batch_policy" {
       "batch:DescribeJobs",
       "batch:DescribeJobDefinitions",
       "batch:DescribeJobQueues",
-      "batch:RegisterJobDefinition"
+      "batch:RegisterJobDefinition",
+      "batch:TagResource"
     ]
 
     resources = [

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,8 @@ data "aws_iam_policy_document" "step_functions_batch_policy" {`
`22`	`22`	`"batch:DescribeJobs",`
`23`	`23`	`"batch:DescribeJobDefinitions",`
`24`	`24`	`"batch:DescribeJobQueues",`
`25`		`- "batch:RegisterJobDefinition"`
	`25`	`+ "batch:RegisterJobDefinition",`
	`26`	`+ "batch:TagResource"`
`26`	`27`	`]`
`27`	`28`
`28`	`29`	`resources = [`