adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-03 02:13:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow ssm:DescribeParameters for meal-order hcptf roles (#99)
Some checks failed
Deploy / deploy-management (push) Has been cancelled
Details
Deploy / deploy-external-dev (push) Has been cancelled
Details
Deploy / deploy-security (push) Has been cancelled
Details
Deploy / deploy-dev (push) Has been cancelled
Details
Deploy / deploy-prod (push) Has been cancelled
Details

Browse source
This commit is contained in:
Adam Moussa 2026-08-07 20:11:48 -04:00 • committed by GitHub
parent 3605215a28
commit f44b88732e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -1698,6 +1698,13 @@ Resources:
Resource:
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/seahaven/waf/app-web-acl-arn"
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/meal-order-manager/*"
# aws_ssm_parameter refresh uses DescribeParameters (collection API;
# resource-level parameter ARNs are a silent no-op for this action).
- Sid: RefreshSsmDescribeParameters
Effect: Allow
Action:
- ssm:DescribeParameters
Resource: "*"
- Sid: RefreshWafWebAcl
Effect: Allow
Action:
@ -1866,6 +1873,12 @@ Resources:
- ssm:ListTagsForResource
Resource:
- !Sub "arn:aws:ssm:us-east-1:${AWS::AccountId}:parameter/meal-order-manager/*"
# Collection API required for aws_ssm_parameter refresh/import.
- Sid: MealOrderSsmDescribeParameters
Effect: Allow
Action:
- ssm:DescribeParameters
Resource: "*"
- Sid: ReadWafWebAcl
Effect: Allow
Action: