Grant access to staging on KV

DFE-Digital · Jan 27, 2025 · 2cc47d7 · 2cc47d7
1 parent d00e881
commit 2cc47d7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/infrastructure/terraform/keyvault.tf b/src/infrastructure/terraform/keyvault.tf
@@ -19,6 +19,11 @@ resource "azurerm_key_vault" "key-vault" {
     tenant_id          = azurerm_user_assigned_identity.web-app-identity.tenant_id
     secret_permissions = ["Get"]
   }
+  access_policy {
+    object_id          = azurerm_user_assigned_identity.web-app-staging-identity.principal_id
+    tenant_id          = azurerm_user_assigned_identity.web-app-staging-identity.tenant_id
+    secret_permissions = ["Get"]
+  }
 
   network_acls {
     default_action = "Allow"