fix(deleter): add missing parameter store permissions

Pocket · Jan 29, 2025 · ac8f956 · ac8f956
1 parent 69c8fe8
commit ac8f956
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/infrastructure/account-data-deleter/src/dataDeleterApp.ts b/infrastructure/account-data-deleter/src/dataDeleterApp.ts
@@ -247,6 +247,10 @@ export class DataDeleterApp extends Construct {
               `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/${config.name}/${config.environment}`,
               `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/${config.name}/${config.environment}/*`,
               `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/Shared/*`,
+              `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/Shared/*`,
+              `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/Web/${config.environment}/FIREFOX_WEB_AUTH_CLIENT_ID`,
+              `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/Web/${config.environment}/FIREFOX_WEB_AUTH_CLIENT_SECRET`,
+              `arn:aws:ssm:${region.name}:${caller.accountId}:parameter/Web/${config.environment}/FIREFOX_AUTH_OAUTH_URL`,
             ],
             effect: 'Allow',
           },