Add ssm:GetParameters action for task execution role

ikovac · ikovac · commit fcfe9a26917d · 2023-11-29T15:20:00.000+01:00
diff --git a/src/components/ecs-service.ts b/src/components/ecs-service.ts
@@ -265,7 +265,7 @@ export class EcsService extends pulumi.ComponentResource {
           {
             Sid: 'AllowContainerToGetSecretManagerSecrets',
             Effect: 'Allow',
-            Action: ['secretsmanager:GetSecretValue'],
+            Action: ['ssm:GetParameters', 'secretsmanager:GetSecretValue'],
             Resource: '*',
           },
         ],

Original file line number	Diff line number	Diff line change
`@@ -265,7 +265,7 @@ export class EcsService extends pulumi.ComponentResource {`
`265`	`265`	`{`
`266`	`266`	`Sid: 'AllowContainerToGetSecretManagerSecrets',`
`267`	`267`	`Effect: 'Allow',`
`268`		`- Action: ['secretsmanager:GetSecretValue'],`
	`268`	`+ Action: ['ssm:GetParameters', 'secretsmanager:GetSecretValue'],`
`269`	`269`	`Resource: '*',`
`270`	`270`	`},`
`271`	`271`	`],`