fix(iam): allow ssm:ListTagsForResource on meal-order plan role

This commit is contained in:
Adam Moussa 2026-08-10 13:23:56 -04:00
parent f44b88732e
commit 1bb5e79ea0
No known key found for this signature in database

View file

@ -1695,6 +1695,8 @@ Resources:
Action:
- ssm:GetParameter
- ssm:GetParameters
# aws_ssm_parameter refresh lists tags on managed parameters.
- ssm:ListTagsForResource
Resource:
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/seahaven/waf/app-web-acl-arn"
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/meal-order-manager/*"