CCL-439 - static site invalidate CF cache

UKHomeOffice · Sep 6, 2024 · 385f2cf · 385f2cf
1 parent 8a4daa5
commit 385f2cf
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/modules/products/static-site/iam.tf b/modules/products/static-site/iam.tf
@@ -95,4 +95,15 @@ data "aws_iam_policy_document" "static_site_policy_document" {
       aws_kms_key.static_site_kms.arn,
     ]
   }
+  statement {
+    sid = "Cloudfront"
+
+    actions = [
+      "cloudfront:CreateInvalidation"
+    ]
+
+    resources = [
+      aws_cloudfront_distribution.static_site_distribution.arn,
+    ]
+  }
 }