authorize Iam to get secrets (#27)

sprintertech · May 21, 2024 · 62e83b9 · 62e83b9
1 parent 5a02e4b
commit 62e83b9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/ecs/iam.tf b/modules/ecs/iam.tf
@@ -31,7 +31,8 @@ resource "aws_iam_policy" "task_policy" {
           "ssm:GetParameter*",
           "ssm:DescribeParameters",
           "kms:Decrypt",
-          "ec2imds:Get*"
+          "ec2imds:Get*",
+          "secretsmanager:GetSecretValue"
         ]
         Effect   = "Allow"
         Resource = "*"