fix: Add secretsmanager:ListSecrets to external-secrets policy (t…

…erraform-aws-modules#305)
chpl · Nov 9, 2022 · d3fb017 · d3fb017
1 parent f26c565
commit d3fb017
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/iam-role-for-service-accounts-eks/policies.tf b/modules/iam-role-for-service-accounts-eks/policies.tf
@@ -414,6 +414,11 @@ data "aws_iam_policy_document" "external_secrets" {
     resources = var.external_secrets_ssm_parameter_arns
   }
 
+  statement {
+    actions   = ["secretsmanager:ListSecrets"]
+    resources = ["*"]
+  }
+
   statement {
     actions = [
       "secretsmanager:GetResourcePolicy",