File tree Expand file tree Collapse file tree 1 file changed +11
-2
lines changed Expand file tree Collapse file tree 1 file changed +11
-2
lines changed Original file line number Diff line number Diff line change @@ -59,11 +59,11 @@ module "secrets_manager" {
59
59
create_policy = true
60
60
block_public_policy = true
61
61
policy_statements = {
62
- read = {
62
+ lambda = {
63
63
sid = "LambdaReadWrite"
64
64
principals = [{
65
65
type = "AWS"
66
- identifiers = ["arn:aws:lambda:us-east-1:123456789012:function:my -function"]
66
+ identifiers = ["arn:aws:iam:1234567890:role/lambda -function"]
67
67
}]
68
68
actions = [
69
69
"secretsmanager:DescribeSecret",
@@ -73,6 +73,15 @@ module "secrets_manager" {
73
73
]
74
74
resources = ["*"]
75
75
}
76
+ read = {
77
+ sid = "AllowAccountRead"
78
+ principals = [{
79
+ type = "AWS"
80
+ identifiers = ["arn:aws:iam::1234567890:root"]
81
+ }]
82
+ actions = ["secretsmanager:DescribeSecret"]
83
+ resources = ["*"]
84
+ }
76
85
}
77
86
78
87
# Version
You can’t perform that action at this time.
0 commit comments