Skip to content

Commit ec75f6f

Browse files
committed
docs: Correct README documentation
1 parent e4ca5ff commit ec75f6f

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

README.md

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,11 +59,11 @@ module "secrets_manager" {
5959
create_policy = true
6060
block_public_policy = true
6161
policy_statements = {
62-
read = {
62+
lambda = {
6363
sid = "LambdaReadWrite"
6464
principals = [{
6565
type = "AWS"
66-
identifiers = ["arn:aws:lambda:us-east-1:123456789012:function:my-function"]
66+
identifiers = ["arn:aws:iam:1234567890:role/lambda-function"]
6767
}]
6868
actions = [
6969
"secretsmanager:DescribeSecret",
@@ -73,6 +73,15 @@ module "secrets_manager" {
7373
]
7474
resources = ["*"]
7575
}
76+
read = {
77+
sid = "AllowAccountRead"
78+
principals = [{
79+
type = "AWS"
80+
identifiers = ["arn:aws:iam::1234567890:root"]
81+
}]
82+
actions = ["secretsmanager:DescribeSecret"]
83+
resources = ["*"]
84+
}
7685
}
7786
7887
# Version

0 commit comments

Comments
 (0)