Pi 3930 sentence plan and delius queue prod

[hazzaz-justice]

No description provided.

[cloud-platform-actions]

There are potential IAM Role and/or policy Changes/additions. Reviewer - If satisfied with the changes/additions - dismiss this request

[cloud-platform-actions]

There are potential IAM Role and/or policy Changes/additions. Reviewer - If satisfied with the changes/additions - dismiss this request

[Sablu M (sablumiah)]

Terraform Plan Summary

Terraform Plan: 14 to be created, 0 to be destroyed, 2 to be updated, 0 to be replaced and 579 unchanged.

Resources to create:

+ aws_sns_topic_subscription.sentence-plan-and-delius-queue-subscription
+ aws_sqs_queue_policy.sentence-plan-and-delius-dlq-policy
+ aws_sqs_queue_policy.sentence-plan-and-delius-queue-policy
+ kubernetes_secret.sentence-plan-and-delius-queue-secret
+ module.sentence-plan-and-delius-dlq.aws_iam_policy.irsa
+ module.sentence-plan-and-delius-dlq.aws_sqs_queue.terraform_queue
+ module.sentence-plan-and-delius-dlq.random_id.id
+ module.sentence-plan-and-delius-queue.aws_iam_policy.irsa
+ module.sentence-plan-and-delius-queue.aws_sqs_queue.terraform_queue
+ module.sentence-plan-and-delius-queue.random_id.id
+ module.sentence-plan-and-delius-service-account.kubernetes_service_account.generated_sa
+ module.sentence-plan-and-delius-service-account.module.iam_assumable_role.aws_iam_role.this[0]
+ module.sentence-plan-and-delius-service-account.module.iam_assumable_role.aws_iam_role_policy_attachment.this["sqs"]
+ module.sentence-plan-and-delius-service-account.random_id.id

Resources to update:

! aws_iam_policy.sqs_management_policy["dlq"]
! aws_iam_policy.sqs_management_policy["queue"]

[Sablu M (sablumiah)]

This PR CANNOT be auto approved and requires manual approval from the Cloud Platform team.
Reason:
🕵️‍♂️ Manual review required: OPA auto approve policy checks did not pass.

Test	Passed?	Reason
allowlist	❌	This PR includes changes to modules / resources which are not on the allowlist, so we can't auto approve these changes. Please request a Cloud Platform team member's review in #ask-cloud-platform
ecr	✅	Valid ECR related terraform changes
hmpps-template	✅	Valid hmpps template related terraform changes
irsa	✅	Valid irsa related terraform changes
kubernetes_secret	✅	Valid K8s secret related terraform changes
rds	✅	Valid RDS module related terraform changes
secrets_manager	✅	Valid secrets manager related terraform changes
service_pod	✅	Valid Service pod related changes
sns	✅	Valid sns related terraform changes

Please raise it in #ask-cloud-platform Slack channel.

[Sablu M (sablumiah)]

Your PR is applying in the build: https://concourse.cloud-platform.service.justice.gov.uk/teams/main/pipelines/environments-live/jobs/apply-namespace-changes-live/builds/23637