Add BatchGet IAM permission for External Secrets

External Secrets now support bulk fetching secrets to reduce AWS API calls. This adds the IAM permission to support this feature,
alphagov · Dec 27, 2024 · 22d5e4d · 22d5e4d
1 parent ba59b38
commit 22d5e4d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/deployments/cluster-infrastructure/external_secrets_iam.tf b/terraform/deployments/cluster-infrastructure/external_secrets_iam.tf
@@ -35,7 +35,8 @@ data "aws_iam_policy_document" "external_secrets" {
       "secretsmanager:GetResourcePolicy",
       "secretsmanager:GetSecretValue",
       "secretsmanager:DescribeSecret",
-      "secretsmanager:ListSecretVersionIds"
+      "secretsmanager:ListSecretVersionIds",
+      "secretsmanager:BatchGetSecretValue"
     ]
 
     resources = [