Add unit_test_trigger access to parameter (#30)

PatientPing · Dec 15, 2023 · 76e3b21 · 76e3b21
1 parent 64d3796
commit 76e3b21
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/lambda_function/unit_test_trigger.tf b/lambda_function/unit_test_trigger.tf
@@ -49,6 +49,15 @@ resource "aws_iam_role_policy" "unit_test_codebuild" {
  "logs:CreateLogStream",
  "logs:PutLogEvents"
  ]
+ },
+ {
+ Effect = "Allow",
+ Action = [
+ "ssm:GetParameter*"
+ ],
+ Resource = [
+ "arn:aws:ssm:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:parameter/cloudeng/infra/github/token"
+ ]
  }
  ]
  })

diff --git a/lambda_layer/unit_test_trigger.tf b/lambda_layer/unit_test_trigger.tf
@@ -49,6 +49,15 @@ resource "aws_iam_role_policy" "unit_test_codebuild" {
  "logs:CreateLogStream",
  "logs:PutLogEvents"
  ]
+ },
+ {
+ Effect = "Allow",
+ Action = [
+ "ssm:GetParameter*"
+ ],
+ Resource = [
+ "arn:aws:ssm:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:parameter/cloudeng/infra/github/token"
+ ]
  }
  ]
  })