update mdss test transfer role (#8722)

* update mdss test transfer role * updated preprod role * add decrypt to bucket policy * remove kms
ministryofjustice · Nov 22, 2024 · 381485e · 381485e
1 parent 8e05e7d
commit 381485e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/terraform/environments/electronic-monitoring-data/modules/landing_bucket/main.tf b/terraform/environments/electronic-monitoring-data/modules/landing_bucket/main.tf
@@ -61,7 +61,7 @@ module "this-bucket" {
       effect = "Allow"
       actions = [
         "s3:PutObject",
-        "s3:PutObjectAcl"
+        "s3:PutObjectAcl",
       ]
       principals = {
         identifiers = ["arn:aws:iam::${var.cross_account_access_role.account_number}:role/${var.cross_account_access_role.role_name}"]

diff --git a/terraform/environments/electronic-monitoring-data/s3.tf b/terraform/environments/electronic-monitoring-data/s3.tf
@@ -5,13 +5,16 @@ locals {
     "production" = null
     "preproduction" = {
       "account_number" = 173142358744
-      "role_name"      = "juniper-dt-lambda-role"
+      "role_name" = "juniper-datatransfer-lambda-role"
     }
     "test" = {
       "account_number" = 173142358744
-      role_name        = "dev-dt-lambda-role"
+      "role_name" = "dev-datatransfer-lambda-role"
+    }
+    "development" = {
+      "account_number" = 173142358744
+      "role_name" = "dev-datatransfer-lambda-role"
     }
-    "development" = null
   }
 }