feat: Add ssm:GetParametersByPath for external secrets (#583)

toneill818 · web-flow · commit 8e4541de5995 · 2025-08-08T09:52:58.000-05:00
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -598,6 +598,7 @@ data "aws_iam_policy_document" "external_secrets" {
       actions = [
         "ssm:GetParameter",
         "ssm:GetParameters",
+        "ssm:GetParametersByPath"
       ]
 
       resources = var.external_secrets_ssm_parameter_arns

Original file line number	Diff line number	Diff line change
`@@ -598,6 +598,7 @@ data "aws_iam_policy_document" "external_secrets" {`
`598`	`598`	`actions = [`
`599`	`599`	`"ssm:GetParameter",`
`600`	`600`	`"ssm:GetParameters",`
	`601`	`+ "ssm:GetParametersByPath"`
`601`	`602`	`]`
`602`	`603`
`603`	`604`	`resources = var.external_secrets_ssm_parameter_arns`