FIXME: try to add events:PutRule et al to profile

I see AccessDeniedException; but this change doesn't fix it

Author: aagbsn

tf/modules/scheduled_service/main.tf

@@ -67,7 +67,10 @@ resource "aws_iam_role_policy" "events_run_task_policy" {
           "iam:PassRole",
           "ecs:StartTask",
           "ecs:DescribeClusters",
-          "ecs:DescribeTasks"
+          "ecs:DescribeTasks",
+          "events:TagResource",
+          "events:PutRule",
+          "events:PutTargets",
         ]
         Resource = "*"
       }
@@ -119,7 +122,7 @@ resource "aws_ecs_task_definition" "scheduled_service" {
       memory            = var.memory_hard_limit
       essential         = true,
       image = try(
-        data.aws_ecs_container_definition.scheduled_service_current.image,
+        data.aws_ecs_container_definition.scheduled_service_current[0].image,
         var.default_docker_image_url
       ),
       name = local.name,

tf/modules/scheduled_service/templates/profile_policy.json

@@ -56,6 +56,16 @@
         "elasticloadbalancing:RegisterTargets"
       ],
       "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "events:TagResource",
+        "events:PutRule",
+        "events:PutTargets"
+      ],
+      "Resource": "*"
     }
+
   ]
 }