allow Actions to read Cloudfront distributions

beggers · Jun 25, 2024 · 7b0bd68 · 7b0bd68
1 parent f56e70a
commit 7b0bd68
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/github_actions.tf b/terraform/github_actions.tf
@@ -54,6 +54,7 @@ data "aws_iam_policy_document" "github_actions_policy" {
   }
   statement {
     actions = [
+      "cloudfront:GetCloudFrontOriginAccessIdentity",
       "cloudfront:CreateInvalidation",
     ]
     effect = "Allow"