#19 updated the IAM policy to decrypt using kms key

kunduso · Sep 18, 2024 · 52540d3 · 52540d3
1 parent 30211ea
commit 52540d3
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ssm_parameter.tf b/ssm_parameter.tf
@@ -27,6 +27,13 @@ resource "aws_iam_policy" "ssm_parameter_policy" {
           "ssm:GetParameter"
         ],
         Resource = [aws_ssm_parameter.rds_connection.arn]
+      },
+      {
+                Effect = "Allow",
+        Action = [
+          "kms:Decrypt"
+        ],
+        Resource = [aws_kms_key.encryption_rds.id]
       }
     ]
   })