Add a confirmation step to pipeline for permissions broadening

ScottLogic · Sep 25, 2024 · e0bb2a1 · e0bb2a1
1 parent 2079e61
commit e0bb2a1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cloud/lib/pipeline-stack.ts b/cloud/lib/pipeline-stack.ts
@@ -6,6 +6,7 @@ import {
 	CodeBuildStep,
 	CodePipeline,
 	CodePipelineSource,
+	ConfirmPermissionsBroadening,
 	ShellStep,
 	Step,
 } from 'aws-cdk-lib/pipelines';
@@ -95,8 +96,7 @@ export class PipelineStack extends Stack {
 
 		// Pre-deployment quality checks
 		deployment.addPre(
-			// TODO Add a ConfirmPermissionsBroadening step:
-			// new ConfirmPermissionsBroadening('Check Permissions', { stage: appStage }),
+			new ConfirmPermissionsBroadening('Check Permissions', { stage: appStage }),
 			new CodeBuildStep('API-CodeChecks', {
 				input: sourceCode,
 				commands: [