fix: Add ssm:DescribeParameters permission to external-secrets IA…

…M role for service account (IRSA) (#348)
terraform-aws-modules · Mar 21, 2023 · fe8d73b · fe8d73b
1 parent 3cef466
commit fe8d73b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -435,6 +435,7 @@ data "aws_iam_policy_document" "external_secrets" {
     actions = [
       "ssm:GetParameter",
       "ssm:GetParameters",
+      "ssm:DescribeParameters",
     ]
     resources = var.external_secrets_ssm_parameter_arns
   }