Fix ssm permissions to pull the AMI

hotosm · Jul 30, 2024 · 2b213fa · 2b213fa
1 parent b7e4601
commit 2b213fa
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/scripts/aws/cloudformation/tasking-manager.template.js b/scripts/aws/cloudformation/tasking-manager.template.js
@@ -543,6 +543,16 @@ const Resources = {
             Resource: ['arn:aws:rds:*']
           }]
         }
+      }, {
+        PolicyName: "SSMPolicy",
+        PolicyDocument: {
+          Version: "2012-10-17",
+          Statement:[{
+            Action: ['ssm:GetParameters'],
+            Effect: 'Allow',
+            Resource: ['arn:aws:ssm:*']
+          }]
+        }
       }, {
         PolicyName: "CloudFormationPermissions",
         PolicyDocument: {