add ssm parameter

terraform-modules · Apr 11, 2023 · 9b30103 · 9b30103
1 parent 57eafe8
commit 9b30103
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/route53-zone-association/lambda-role/main.tf b/route53-zone-association/lambda-role/main.tf
@@ -53,6 +53,8 @@ data "aws_iam_policy_document" "policy" {
       "route53:List*",
       "route53:TestDNSAnswer",
       "route53:ChangeResourceRecordSets",
+      "ssm:DescribeParameters",
+      "ssm:GetParameter*",
     ]
     resources = ["*"]
   }

diff --git a/route53-zone-association/terraform-role/main.tf b/route53-zone-association/terraform-role/main.tf
@@ -57,6 +57,8 @@ data "aws_iam_policy_document" "policy" {
       "route53:DeleteVPCAssociationAuthorization",
       "route53:TestDNSAnswer",
       "route53:ChangeResourceRecordSets",
+      "ssm:DescribeParameters",
+      "ssm:GetParameter*",
     ]
     resources = ["*"]
   }