fix(ssm): add GetParameters action to grantRead() (#3546)

jogold · Elad Ben-Israel · commit ebaa1b5fc2ca · 2019-08-06T08:31:21.000+03:00
diff --git a/packages/@aws-cdk/aws-ecs/test/test.container-definition.ts b/packages/@aws-cdk/aws-ecs/test/test.container-definition.ts
@@ -359,6 +359,7 @@ export = {
           {
             Action: [
               'ssm:DescribeParameters',
+              'ssm:GetParameters',
               'ssm:GetParameter',
               'ssm:GetParameterHistory'
             ],
diff --git a/packages/@aws-cdk/aws-ssm/lib/parameter.ts b/packages/@aws-cdk/aws-ssm/lib/parameter.ts
@@ -126,7 +126,12 @@ abstract class ParameterBase extends Resource implements IParameter {
   public grantRead(grantee: iam.IGrantable): iam.Grant {
     return iam.Grant.addToPrincipal({
       grantee,
-      actions: ['ssm:DescribeParameters', 'ssm:GetParameter', 'ssm:GetParameterHistory'],
+      actions: [
+        'ssm:DescribeParameters',
+        'ssm:GetParameters',
+        'ssm:GetParameter',
+        'ssm:GetParameterHistory'
+      ],
       resourceArns: [this.parameterArn],
     });
   }
diff --git a/packages/@aws-cdk/aws-ssm/test/integ.parameter.lit.expected.json b/packages/@aws-cdk/aws-ssm/test/integ.parameter.lit.expected.json
@@ -40,6 +40,7 @@
             {
               "Action": [
                 "ssm:DescribeParameters",
+                "ssm:GetParameters",
                 "ssm:GetParameter",
                 "ssm:GetParameterHistory"
               ],
