We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a0e722a commit 9aef411Copy full SHA for 9aef411
terraform/common/locals.tf
@@ -31,6 +31,22 @@ locals {
31
"arn:aws:iam::aws:policy/AmazonS3FullAccess",
32
"arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
33
]
34
+ custom_inline_policies = {
35
+ ssm_mysql_url_access = {
36
+ name = "ssm-mysql-url-access"
37
+ description = "Allow reading MySQL URL parameter from SSM"
38
+ policy_document = {
39
+ Version = "2012-10-17"
40
+ Statement = [
41
+ {
42
+ Effect = "Allow"
43
+ Action = ["ssm:GetParameter"]
44
+ Resource = "arn:aws:ssm:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:parameter/dev/MYSQL_URL"
45
+ }
46
+ ]
47
48
49
50
tags = {
51
Purpose = "ECS EC2 Registration"
52
}
0 commit comments