fix: GetParameter resources list

radimsuckr · radimsuckr · commit 6668e0687ba5 · 2022-11-30T11:41:14.000+01:00
diff --git a/iam.tf b/iam.tf
@@ -68,10 +68,13 @@ data "aws_iam_policy_document" "lambda" {
   }
 
   statement {
-    sid       = "AllowSSMGetParameter"
-    effect    = "Allow"
-    actions   = ["ssm:GetParameter"]
-    resources = ["arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter}"]
+    sid     = "AllowSSMGetParameter"
+    effect  = "Allow"
+    actions = ["ssm:GetParameter"]
+    resources = [
+      "arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter}",
+      "arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter_arm}",
+    ]
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -68,10 +68,13 @@ data "aws_iam_policy_document" "lambda" {`
`68`	`68`	`}`
`69`	`69`
`70`	`70`	`statement {`
`71`		`- sid = "AllowSSMGetParameter"`
`72`		`- effect = "Allow"`
`73`		`- actions = ["ssm:GetParameter"]`
`74`		`- resources = ["arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter}"]`
	`71`	`+ sid = "AllowSSMGetParameter"`
	`72`	`+ effect = "Allow"`
	`73`	`+ actions = ["ssm:GetParameter"]`
	`74`	`+ resources = [`
	`75`	`+ "arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter}",`
	`76`	`+ "arn:aws:ssm:${data.aws_region.current.name}:*:parameter${var.ami_ssm_parameter_arm}",`
	`77`	`+ ]`
`75`	`78`	`}`
`76`	`79`	`}`
`77`	`80`