VIA-615 AJ/AS Provide appropriate permissions to get secrets in cache hydrator

Author: ankur-jain-nhs

infrastructure/modules/deploy_app/policies/server-lambda-iam-policy.json

@@ -1,11 +1,6 @@
 {
   "Version": "2012-10-17",
   "Statement": [
-    {
-      "Effect": "Allow",
-      "Action": ["kms:Decrypt"],
-      "Resource": "arn:aws:kms:${region}:${account_id}:alias/aws/ssm"
-    },
     {
       "Effect": "Allow",
       "Action": ["s3:ListBucket", "s3:GetObject"],

infrastructure/modules/deploy_lambda/policies/cache-lambda-iam-role-policy.json

@@ -3,14 +3,8 @@
   "Statement": [
     {
       "Effect": "Allow",
-      "Action": ["kms:Decrypt"],
-      "Resource": "arn:aws:kms:${region}:${account_id}:alias/aws/ssm"
-    },
-
-    {
-      "Effect": "Allow",
-      "Action": ["ssm:GetParameter"],
-      "Resource": "arn:aws:ssm:${region}:${account_id}:parameter/${prefix}/*"
+      "Action": ["secretsmanager:GetSecretValue"],
+      "Resource": "arn:aws:secretsmanager:${region}:${account_id}:secret:/vita/*"
     },
 
     {