Allow lambda to read cluster credentials secret

DiegoVictor · Jul 12, 2024 · 1c2e72b · 1c2e72b
1 parent ea97b83
commit 1c2e72b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/template.yml b/template.yml
@@ -63,6 +63,13 @@ Resources:
       CodeUri:
         Bucket: !ImportValue coderunner-BucketName
         Key: !Ref CodeUri
+      Policies:
+        - Version: '2012-10-17'
+          Statement:
+            - Effect: Allow
+              Action:
+                - secretsmanager:GetSecretValue
+              Resource: '*'
       Environment:
         Variables:
           NODE_ENV: prod