chore: Allow reading all parameters in AWS instance policy

Bug: 370963662 Change-Id: I7027cad7f6d4146e8ff8f7c157d0179bf22b9f31 GitOrigin-RevId: b3f58db8eba38301bbbc044275862b801d3e2712
privacysandbox · Oct 16, 2024 · 3474db5 · 3474db5
1 parent 99e875b
commit 3474db5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/production/terraform/aws/services/iam_role_policies/main.tf b/production/terraform/aws/services/iam_role_policies/main.tf
@@ -61,7 +61,7 @@ data "aws_iam_policy_document" "instance_policy_doc" {
     sid       = "AllowInstancesToReadParameters"
     actions   = ["ssm:GetParameter"]
     effect    = "Allow"
-    resources = setunion(var.server_parameter_arns, var.coordinator_parameter_arns, var.metrics_collector_endpoint_arns, var.sharding_key_regex_arns, var.consented_debug_token_arns)
+    resources = ["*"]
   }
   statement {
     sid       = "AllowInstancesToAssumeRole"