Merge pull request #1555 from alphagov/es-bulk-fetch-iam

Add BatchGet IAM permission for External Secrets
alphagov · Dec 27, 2024 · cedf154 · cedf154
2 parents 0fbd10c + 22d5e4d
commit cedf154
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/deployments/cluster-infrastructure/external_secrets_iam.tf b/terraform/deployments/cluster-infrastructure/external_secrets_iam.tf
@@ -35,7 +35,8 @@ data "aws_iam_policy_document" "external_secrets" {
       "secretsmanager:GetResourcePolicy",
       "secretsmanager:GetSecretValue",
       "secretsmanager:DescribeSecret",
-      "secretsmanager:ListSecretVersionIds"
+      "secretsmanager:ListSecretVersionIds",
+      "secretsmanager:BatchGetSecretValue"
     ]
 
     resources = [