db secrets access & tls requirement

thunderbird · Apr 17, 2024 · 1caf511 · 1caf511
1 parent 8e6f74a
commit 1caf511
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/tofu/modules/data-store/database/main.tf b/tofu/modules/data-store/database/main.tf
@@ -45,7 +45,7 @@ module "db" {
   parameters = [
     {
       name  = "require_secure_transport"
-      value = 1
+      value = 0
     }
   ]
 

diff --git a/tofu/modules/network/vpc/main.tf b/tofu/modules/network/vpc/main.tf
@@ -132,7 +132,8 @@ resource "aws_iam_policy" "appointment_secrets_policy" {
                 "secretsmanager:GetSecretValue"
             ],
             "Resource": [
-              "arn:aws:secretsmanager:${var.region}:768512802988:secret:${var.environment}/appointment/*"
+              "arn:aws:secretsmanager:${var.region}:768512802988:secret:staging/appointment/*",
+              "arn:aws:secretsmanager:${var.region}:768512802988:secret:${var.name_prefix}-db-secret-*"
             ]
         }
     ]