chore: update bastion role iam permissions for secretsmanager

defenseunicorns · Oct 25, 2023 · 37d4e3e · 37d4e3e
1 parent 3d198e1
commit 37d4e3e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/iam.tf b/iam.tf
@@ -349,7 +349,8 @@ resource "aws_iam_policy" "terraform_policy" {
                 "inspector:StopAssessmentRun",
                 "inspector:SubscribeToEvent",
                 "inspector:UnsubscribeFromEvent",
-                "inspector:UpdateAssessmentTarget"
+                "inspector:UpdateAssessmentTarget",
+                "secretsmanager:GetSecretValue"
             ],
             "Resource": "*",
             "Effect": "Allow"