feat: grant ssm:GetParameters to ecs_exec role (#42)

ssm:GetParameters allows to use the ```secrets``` and ```valueFrom``` for the ssm params Author: Gleb Godonoga <gleb.godonoga@gmail.com> Co-authored-by: Maxim Mironenko <simixido@gmail.com>
cloudposse · Feb 25, 2020 · e053720 · e053720
1 parent 1d29048
commit e053720
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -175,6 +175,7 @@ data "aws_iam_policy_document" "ecs_exec" {
     resources = ["*"]
 
     actions = [
+      "ssm:GetParameters",
       "ecr:GetAuthorizationToken",
       "ecr:BatchCheckLayerAvailability",
       "ecr:GetDownloadUrlForLayer",