Add ssm:PutParameter to oidc policy (#5307)

ministryofjustice · Oct 27, 2023 · bbb857e · bbb857e
1 parent eb90827
commit bbb857e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/environments/bootstrap/member-bootstrap/iam.tf b/terraform/environments/bootstrap/member-bootstrap/iam.tf
@@ -457,7 +457,8 @@ data "aws_iam_policy_document" "policy" {
       "secretsmanager:ListSecrets",
       "secretsmanager:DescribeSecret",
       "secretsmanager:GetResourcePolicy",
-      "ssm:GetParameter"
+      "ssm:GetParameter",
+      "ssm:PutParameter"
     ]
     resources = ["*"] #tfsec:ignore:AWS099 tfsec:ignore:AWS097
   }