Merge pull request #2111 from govuk-forms/allow-ce-access

cadmiumcat · web-flow · commit 56ca60050178 · 2026-05-11T07:23:35.000Z
Add more permissions to use Purchase Analyser
diff --git a/infra/modules/engineer-access/policies.tf b/infra/modules/engineer-access/policies.tf
@@ -344,7 +344,10 @@ resource "aws_iam_policy" "get_usage_data" {
       },
       {
         Action = [
-          "ce:GetCommitmentPurchaseAnalysis",
+          "ce:*PurchaseAnalysis*",
+          "ce:GetReservation*",
+          "ce:GetRightsizingRecommendation",
+          "ce:*SavingsPlan*"
         ]
         Effect = "Allow"
         Resource = [

Original file line number	Diff line number	Diff line change
`@@ -344,7 +344,10 @@ resource "aws_iam_policy" "get_usage_data" {`
`344`	`344`	`},`
`345`	`345`	`{`
`346`	`346`	`Action = [`
`347`		`- "ce:GetCommitmentPurchaseAnalysis",`
	`347`	`+ "ce:PurchaseAnalysis",`
	`348`	`+ "ce:GetReservation*",`
	`349`	`+ "ce:GetRightsizingRecommendation",`
	`350`	`+ "ce:SavingsPlan"`
`348`	`351`	`]`
`349`	`352`	`Effect = "Allow"`
`350`	`353`	`Resource = [`