adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-06 04:01:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow ssm:ListTagsForResource on meal-order plan role

Browse source
This commit is contained in:
Adam Moussa 2026-08-10 13:23:56 -04:00
parent f44b88732e
commit 1bb5e79ea0
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -1695,6 +1695,8 @@ Resources:
Action: Action:
- ssm:GetParameter - ssm:GetParameter
- ssm:GetParameters - ssm:GetParameters
# aws_ssm_parameter refresh lists tags on managed parameters.
- ssm:ListTagsForResource
Resource: Resource:
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/seahaven/waf/app-web-acl-arn" - !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/seahaven/waf/app-web-acl-arn"
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/meal-order-manager/*" - !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/meal-order-manager/*"