feat: allow writing to backup bucket

terraform/aws.tf

@@ -211,6 +211,10 @@ module "secondary" {
     bucket = module.logging_bucket.name
   }
 
+  backups = {
+    bucket = module.postgres_backups_bucket.name
+  }
+
   key_name       = aws_key_pair.main.key_name
   hosted_zone_id = aws_route53_zone.opentracker.id
 }

terraform/modules/f2-instance/main.tf

@@ -53,6 +53,11 @@ resource "aws_iam_policy" "this" {
         Effect   = "Allow"
         Resource = format("arn:aws:s3:::%s/*", var.logging.bucket)
       },
+      {
+        Action   = ["s3:PutObject"]
+        Effect   = "Allow"
+        Resource = format("arn:aws:s3:::%s/*", var.backups.bucket)
+      },
     ]
   })
 }

terraform/modules/f2-instance/variables.tf

@@ -29,6 +29,13 @@ variable "logging" {
   description = "Parameters for use in logging output"
 }
 
+variable "backups" {
+  type = object({
+    bucket = string
+  })
+  description = "Parameters for use in taking database backups"
+}
+
 variable "key_name" {
   type        = string
   description = "The name of the `aws_key_pair` to use for the instance access"