From e70d5fbf183ba2a5c8ed2b8ec364c4faa7e4e78b Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Wed, 13 May 2026 11:52:32 -0400
Subject: [PATCH] Add SSM GetParameter permission to submit order Lambda

Required for reading the Google Client ID from Parameter Store
at /meal-order-manager/google-client-id.
---
 template.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/template.yaml b/template.yaml
index 8e2d1b8..9b0fbdb 100644
--- a/template.yaml
+++ b/template.yaml
@@ -242,6 +242,9 @@ Resources:
             - Effect: Allow
               Action: lambda:InvokeFunction
               Resource: !GetAtt SlackNotifierFunction.Arn
+            - Effect: Allow
+              Action: ssm:GetParameter
+              Resource: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/meal-order-manager/*'
       Events:
         SubmitOrder:
           Type: HttpApi