Skip to content

Commit

Permalink
fix: add missing GetParameter policy (#1058)
Browse files Browse the repository at this point in the history
## Description

This pull request addresses a bug where utilizing the module with
'access_token_secure_parameter_store_name' instead of
'registration_token' results in a failure to retrieve the parameter
value, leading to an error. The issue manifests when the module is
applied, and subsequent attempts by the EC2 instance to fetch the
parameter during runtime result in a 'permission denied' error, as
observed in CloudWatch logs

Closes #1057 

## Migrations required

No
  • Loading branch information
davidramosweb committed Dec 21, 2023
1 parent 6132943 commit e1071fa
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policies/instance-secure-parameter-role-policy.json
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@
{
"Effect": "Allow",
"Action": [
"ssm:GetParameter",
"ssm:GetParameters"
],
"Resource": "arn:${partition}:ssm:*"
Expand Down

0 comments on commit e1071fa

Please sign in to comment.