From 2b213faff1c21e51b5dea92762df6f21b7c390ce Mon Sep 17 00:00:00 2001
From: DK Benjamin <dakota.benjamin@hotosm.org>
Date: Tue, 30 Jul 2024 15:52:39 -0400
Subject: [PATCH] Fix ssm permissions to pull the AMI

---
 scripts/aws/cloudformation/tasking-manager.template.js | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/scripts/aws/cloudformation/tasking-manager.template.js b/scripts/aws/cloudformation/tasking-manager.template.js
index f5bc32f280..d6cc4c0093 100644
--- a/scripts/aws/cloudformation/tasking-manager.template.js
+++ b/scripts/aws/cloudformation/tasking-manager.template.js
@@ -543,6 +543,16 @@ const Resources = {
             Resource: ['arn:aws:rds:*']
           }]
         }
+      }, {
+        PolicyName: "SSMPolicy",
+        PolicyDocument: {
+          Version: "2012-10-17",
+          Statement:[{
+            Action: ['ssm:GetParameters'],
+            Effect: 'Allow',
+            Resource: ['arn:aws:ssm:*']
+          }]
+        }
       }, {
         PolicyName: "CloudFormationPermissions",
         PolicyDocument: {