Merge pull request #69 from ndlib/MEL-339-fix-ssm-permissions

Fix ssm permissions on Manifest Pipeline
ndlib · May 1, 2019 · 07d6dab · 07d6dab
2 parents 21d8077 + 1859b2c
commit 07d6dab
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/deploy/cloudformation/manifest-pipeline-pipeline.yml b/deploy/cloudformation/manifest-pipeline-pipeline.yml
@@ -198,6 +198,8 @@ Resources:
             - 'ssm:Delete*'
             - 'ssm:Put*'
             - 'ssm:AddTags*'
+            - 'ssm:RemoveTagsFromResource'
+            - 'ssm:GetParameters'
             Resource:
               - !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/all/stacks/${TestStackName}/*"
               - !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/all/stacks/${ProdStackName}/*"