Allow access to secretsmanager

Author: kostz

cluster/cluster.yaml

@@ -1938,6 +1938,9 @@ Resources:
               - Action: 'states:ListExecutions'
                 Effect: Allow
                 Resource: '*'
+              - Action: 'secretsmanager:GetSecretValue'
+                Effect: Allow
+                Resource: "arn:aws:secretsmanager:{{.Cluster.Region}}:{{.Cluster.InfrastructureAccount | getAWSAccountID}}:secret:*.zmon-db-user.credentials*"
             Version: 2012-10-17
           PolicyName: root
       RoleName: "{{.Cluster.LocalID}}-app-zmon"