Skip to content

Commit e1071fa

Browse files
fix: add missing GetParameter policy (#1058)
## Description This pull request addresses a bug where utilizing the module with 'access_token_secure_parameter_store_name' instead of 'registration_token' results in a failure to retrieve the parameter value, leading to an error. The issue manifests when the module is applied, and subsequent attempts by the EC2 instance to fetch the parameter during runtime result in a 'permission denied' error, as observed in CloudWatch logs Closes #1057 ## Migrations required No
1 parent 6132943 commit e1071fa

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

policies/instance-secure-parameter-role-policy.json

+1
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@
1111
{
1212
"Effect": "Allow",
1313
"Action": [
14+
"ssm:GetParameter",
1415
"ssm:GetParameters"
1516
],
1617
"Resource": "arn:${partition}:ssm:*"

0 commit comments

Comments
 (0)